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Abstract 

Wc introduce an algebra qCCS of pure quantum processes in which 
no classical data is involved, communications by moving quantum 
states physically are allowed, and computations is modeled by super- 
operators. An operational semantics of qCCS is presented in terms 
of (non- probabilistic) labeled transition systems. Strong bisimulation 
between processes modeled in qCCS is defined, and its fundamental al- 
gebraic properties are established, including uniqueness of the solutions 
of recursive equations. To model sequential computation in qCCS, a 
reduction relation between processes is defined. By combining reduc- 
tion relation and strong bisimulation we introduce the notion of strong 
reduction-bisimulation, which is a device for observing interaction of 
computation and communication in quantum systems. Finally, a no- 
tion of strong approximate bisimulation (equivalently, strong bisim- 
ulation distance) and its reduction counterpart are introduced. It is 
proved that both approximate bisimilarity and approximate reduction- 
bisimilarity are preserved by various constructors of quantum pro- 
cesses. This provides us with a formal tool for observing robustness 
of quantum processes against inaccuracy in the implementation of its 
elementary gates. 
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operator, process algebra, bisimulation 
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1 Introduction 



Quantum information science is usually divided into two subareas: quan- 
tum computation and quantum communication. Quantum computation of- 
fers the possibility of considerable speedup over classical computation by 
exploring the power of superposition of quantum states. Two striking ex- 
amples of quantum algorithms are Shor's quantum factoring and Grover's 
quantum searching. On the other hand, some communication protocols are 
proposed by employing quantum mechanical principles (in particular, no- 
cloning property and entanglement), for example BB84 and B92, which are 
provable secure. Quantum communication systems using these protocols are 
already commercially available. 

The studies of quantum process algebras allow us to glue the two subar- 
eas of quantum information science. To provide formal techniques for mod- 
eling, analysis and verification of quantum communication protocols. Gay 
and Nagarajan [U Hj defined a language CQP (Communicating Quantum 
Processes), which is obtained from the pi-calculus by adding primitives for 
measurements and transformations of quantum states and allowing trans- 
mission of qubits. They gave an operational semantics and presented a type 
system for CQP, and in particular proved that the semantics preserves typ- 
ing and that typing guarantees that each qubit is owned by a unique process 
within a system. To model concurrent quantum computation, Jorrand and 
Lalire [SI El [U |T0] defined a language QPAlg (Quantum Process Algebra). 
It is obtained by adding primitives expressing unitary transformations and 
quantum measurements, as well as communications of quantum states, to 
a classical process algebra, which is similar to CCS. An operational seman- 
tics of QPAlg is given, and further a probabilistic branching bisimulation 
between quantum processes modeled in QPAlg is defined. 

In this paper, we introduce a new algebra of quantum processes, qCCS, 
which is a quantum generalization of CCS. The design decision of qCCS 
differs from that of the previous quantum process algebras in the following 
two aspects: (1) The driving idea of the design of CQP is to provide formal 
model for analyzing quantum communication protocols. Almost all of the 
existing quantum protocols involve transmission of both classical and quan- 
tum data. The purpose of designing QPAlg is to model cooperation between 
quantum and classical computations. Thus, these quantum process algebras 
have to accommodate quantum communication as well as classical commu- 
nication. The aim of the present paper is different, and we mainly want 
to provide a suitable framework in which we can understand mechanism of 
quantum concurrent computation and observe interaction and conjugation 



2 



of computation and communication in quantum systems. At the first step, 
it is reasonable to isolate quantum data from classical data so that we have a 
much simpler model in which a clearer understanding of quantum concurrent 
computation may be achieved. So, we decide to focus our attention on an 
algebra of pure quantum processes, not involving any classical information. 
Of course, in the future, after we have a thorough understanding of pure 
quantum processes, qCCS can be extended by adding classical ingredients. 
(2) The mathematical tools used to describe transformations of quantum 
states in the previous quantum process algebras are unitary operators. Ac- 
cording the basic postulates of quantum mechanics, unitary operators are 
suited to depict the dynamics of closed quantum systems, but a more suit- 
able mathematical formalism for evolution of open quantum systems is given 
in terms of super-operators. Since quantum process algebras are mainly ap- 
plied in modeling quantum concurrent systems in which interactions between 
their subsystems happen frequently, and it seems more reasonable to treat 
the involved systems as open systems, we choose to use super-operators in 
describing transformations of quantum states. Indeed, the usage of super- 
operators in qCCS was influenced by Selinger's denotational semantics for 
his quantum functional programming language QPL [14]. 

There are still some technical differences between qCCS and the previous 
quantum process algebras. First, the treatment of quantum variables and 
their substitutions is a key ingredient in defining the operational and bisim- 
ulation semantics of qCCS. This was not addressed in the previous works. It 
was already realized in [2l|3l|4l|5l[6l|9l[5j that one should consider passing of 
the quantum systems used to express certain quantum information instead 
of passing of the quantum information itself, due to the no-cloning property 
of quantum information [16]. Hence, quantum variables must be explicitly 
introduced to denote the quantum systems under consideration. In treat- 
ing quantum variables in qCCS, we follows the way of manipulating names 
in the pi-calculus [12j. But a serious difference is that distinct quantum 
variables cannot be substituted by the same quantum variable, complying 
with, again, the no-cloning theorem of quantum information. Second, as in 
classical process algebras, operational semantics of quantum processes is pre- 
sented in terms of transitions between configurations. A quantum variable 
and its current state have to be separated in order to avoid abuse of quantum 
information which may violate the no-cloning theorem. Thus, a quantum 
configuration defined in [HEIIHEIEIISIII] consists of a quantum process 
together with state information of the involved quantum variables. In this 
paper, a configuration is required to record state information of all quan- 
tum variables (not only those occurring in the process under consideration) . 
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Although a configuration defined in this way includes some unnecessary in- 
formation, it allows us to simplify considerably our presentation. (Note that 
such a simple idea is used to simplify the presentation of propositional logic. 
In evaluating a given propositional formula we only need to know the truth 
values assigned to the propositional variables occurring in this formula, but 
a truth valuation is generally defined to be an assignment of truth values to 
all propositional variables.) Third, only the notion of exact bisimulation is 
generalized to quantum processes in [21 [9]. A set of classical gates is universal 
if it can be used to compute exactly an arbitrary boolean function. However, 
exact universality does not make sense in quantum computation because all 
quantum gates form a continuum which cannot be generated by a finite set 
of quantum gates. Instead, a set of quantum gates is said to be univer- 
sal provided any quantum gate can be approximated to arbitrary accuracy 
by a circuit constructed from the gates in this set. To describe approxi- 
mation between quantum processes and, in particular, implementation of a 
quantum process by some (usually finitely many) special quantum gates, an 
approximate version of bisimulation (or equivalently, bisimulation distance) 
is still missing. Recently, van Breugel [15] and the first author \n\ [TBI [T9] 
introduced the notion of approximate bisimulation for classical processes in 
which a distance between actions is presumed. In the present paper, both 
exact and approximate bisimulations are defined in qCCS, the latter using 
a distance between super-operators induced naturally from trace distance 
of quantum states. We believe that approximate bisimulations are appro- 
priate formal tools for analyzing robustness of quantum processes against 
inaccuracy in the implementation of its elementary gates. 

This paper is organized as follows: Section 2 reviews some basic no- 
tions, needed in the sequent sections, from quantum theory. In Section 3 
we define the syntax and an operational semantics of qCCS and give some 
simple examples to illustrate the expressive power of qCCS. The notion 
of strong bisimulation between quantum processes is introduced, monoid 
and expansion laws as well as congruence and recursive properties of strong 
bisimilarity are established, and uniqueness of solutions of equations with 
respect to strong bisimilarity is presented in Section 4. In Section 5, we first 
define a reduction relation between strings of quantum operations and then 
extend it to a reduction between quantum processes. The notion of strong 
reduction-bisimilarity is defined by combining reduction relation and strong 
bisimilarity, and it is shown to be congruent under the process construc- 
tors in qCCS. In Section 6, the notions of approximate strong bisimilarity 
and reduction-bisimilarity are proposed and their corresponding metrics are 
defined. It is proved that all process constructors are non-expansive with 
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respect to both strong bisimulation metric and reduction-bisimulation met- 
ric. Section 7 is the concluding section where we draw a brief conclusion 
and mention some topics for further studies. 



2 Preliminaries 

For convenience of the reader we briefly recall some basic notions from quan- 
tum theory and fix the notations needed in the sequel. We refer to [13] for 
more details. 



2.1 Hilbert spaces 

An isolated physical system is associated with a Hilbert space which is 
called the state space of the system. In this paper, we mainly consider 
finite-dimensional Hilbert spaces. A (finite-dimensional) Hilbert space is a 
complex vector space 7i together with an inner product which is a mapping 
(•|-) : 7i X 7i ^ C satisfying the following properties: (1) > with 

equality if and only if \(t>) = 0; (2) {(t>\^) = (3) {4>\Xi'il^i + \2^2) = 

Ai(0|'i/'i) + A2((/'|^2)) where C is the set of complex numbers, and A* stands 
for the conjugate of A for each complex number A G C. 

Example 2.1 Let n > 1. For any \(p) = (xi, x^)"^, 1-0) = {yi, ...,ynf e 
C" and A G C, uie define: \ip) + = {xi + yi, ...,Xn + Vn)'^ <ind \\ip) = 
(Axi, Ax„)-^, where ^ stands for transpose. Then C" is a vector space. 
We often write {(p\ for the adjoint \(p)'^ of Furthermore, we define 

(•|-) in C" as follows: {<f\'4^) = X^ILi /^'^ '^'"^V \^) ~ {^i^ ■■•^^n)'^ and 
IV') = (yij-'-jJ/n)^ £ C". r/ien (C"", (•!•)) is an n— dimensional mibert space. 
Indeed, each n— dimensional Hilbert space is isometric to C". 

In particular, a qubit is a physical system whose state space is TL2 = C^. 

If we write 1^) ~ ^ q ^ ^'^'^ ~ ( 1 ) ' ^^'^'"^•^^'^'^'^^^5' ^'^ one-bit classical 

values and called the computational basis, then a qubit has state a\0) + 
with a,/3 G C and |ap -|- = 1. The Hadamard basis consists of the 
following two states: 

|+) = -^(|o) + |i)), |-) = -L(|o)-|i)). 



For any vector in TL, its length ||?/;|| is defined to be \J (V'lV') • A pure 
state of a quantum system is a unit vector in its state space; that is, a vector 
I?/;) with IIIV')!! = 1- An orthonormal basis of a Hilbert space W is a basis 
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with 



1, if^ = i, 

0, otherwise. 



Then the trace of a hnear operator A on 



Ti. is defined to be tr{A) = '^i{i\A\i) . A mixed state of quantum system is 
represented by a density operator. A density operator in a Hilbcrt space TC is 
a hnear operator p on it fulfihing the fohowing conditions: (1) p is positive in 
the sense that (V'|/o|?/') > for all lip); (2) tr{p) = 1. An equivalent concept 
of density operator is ensemble of pure states. An ensemble is a set of the 
form {ipi,\ipi))} such that pi > and j-i/'i) is a pure state for each i, and 
^jPi = 1. Then p = J2i Pili^i) {''Pil a density operator, and conversely 
each density operator can be generated by an ensemble of pure states in this 
way. A positive operator p is called a partial density operator if tr{p) < 1. 
We write T>{H) for the set of partial density operators on H. 

2.2 Unitary operators 

The evolution of a closed quantum system is described by a unitary operator 
on its state space. A linear operator U on a, Hilbert space H is said to be 
unitary if C/^?7 = In, where I-^ is the identity operator on H, and is 
the adjoint of U. If the states of the system at times ti and t2 are pi 
and p2, respectively, then p2 = UpiU'^ for some unitary operator U which 
depends only on ti and t2- In particular, if pi and p2 are pure states 
and \ip2), respectively; that is, pi = and p2 = |^2)(V'2|, then we 

have \ip2) = U\ipi). 

Example 2.2 The most frequently used unitary operators on qubits are the 
Hadamard transformation: 



2.3 Quantum measurement 

A quantum measurement is described by a collection {Mm} of measurement 
operators, where the indexes m refer to the measurement outcomes. It is 




and the Pauli matrices: 
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required that the measurement operators satisfy the completeness equation 
^mMjn = Ij^. If the System is in state p, then the probabihty that 
measurement result m occurs is given by p{m) = tr{MmMmp), and the 
state of the system after the measurement is ^^^^"^ ■ For the case that p 
is a pure state jV'), we have p{m) = ||Mj„|'i/')|p, and the post-measurement 
state is 

Example 2.3 The measurement on qubits in the computational basis con- 
sists of Pq = |0)(0| and Pi = |1)(1|. If we perform, it on a qubit which is 
in state a|0) + P\l), then either the result will be gotten, with probability 
lap, or the result 1, with probability 



2.4 Tensor products 

The state space of a composite system is the tensor product of the state 
spaces of its components. Let Tti and H2 be two Hilbert spaces. Then 
their tensor product TCi fS> "^2 consists of linear combinations of vectors 
lV'iV'2) = iV'i) IV'2) with iV'i) G Hi and IV'2) G ^-2- 

For any linear operator Ai on Hi and A2 on H2, ^1 (8> A2 is an operator 
on Hi and it is defined by (^1 <8) ^2)|'0i'02) = ^ilV'i) <^ ^2|V'2) for each 
IV'i) G Hi and |V'2> G H2. 

Let \(p) = J2iai\(piiif2i) and = Pj\ipijip2j) G 7ii<E>7i2- Then their 
inner product is defined as follows: {(p\tp) = J2i j'^i(^j{'P^^\'4'lj){'P2^\'<p2j)■ 
Example 2.4 A composite quantum system can exhibit the phenomenon 
of entanglement. A state of a composite system is an entangled state if 
it cannot be written as a product of states of its component systems. The 
following are maximally entangled states of two-qubits, called Bell states: 

|/3oo) = ^(|00) + 111)), |/3oi) = ^(|01) + |10)), 

|/3io) = ^(|00) - 111)), |/3n) = ^(|01) - |10)). 

The notion of tensor product may be easily generalized to the case of any 
finite number of Hilbert spaces. The tensor product of countably infinitely 
many finite-dimensional Hilbert spaces is a countably infinite-dimensional 
Hilbert space isomorphic to of sequences {xnj^o '^^ complex numbers 
such that ^^ol^"l^ converges, where for any \(f)) = {a;„}^Q and IV") = 
{z/nj^O' ttisir inner product is defined by (^IV') = X^^o^n^n- Since density 
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operators are special linear operators, their tensor product is then well- 
defined. If component system i is in state pi for each i, then the state of the 
composite system is pi. 

2.5 Super-operators 

The dynamics of open quantum systems cannot be described by unitary 
operators, and one of its mathematical formalisms is the notion of super- 
operator. A super-operator on a Hilbert space H is a linear operator S from 
the space of linear operators on 7i into itself which satisfies the following two 
conditions: (1) tr[S{p)] < tr{p) for each p G ViTi); (2) Complete positivity: 
for any extra Hilbert space TLr, {Ir is positive provided ^4 is a 

positive operator on TCr (X" Tl, where Ir is the identity operation on TCr. If 
(1) is strengthened to tr[£{p)] = tr[p) for all p £ T>{7i), then £ is said to be 
trace-preserving. 

Example 2.5 1. Let U he a unitary operator on Hilbert space 7i, and 
£{p) = U pU'^ for any p G ViTi). Then £ is a super- operator. 

2. Let {Mm} be a quantum measurement on TC. For each m, we de- 
fine £m{p) = MmpMm for any p G Viji). Then £m is a super- 
operator. If the state of the system immediately before the measure- 
ment is p, then the probability of obtaining measurement result m is 
p{m) = tr[£m{p)), and the state of the system immediately after the 
measurement is £m{p) / tr{£m{p)) ■ 

3. As in 2, let {Mm} be a quantum measurement onTC. If £ is given by 
this measurement, with the result of the measurement unknown, i.e., 
£{p) = Ylm ^mpMm for each p G Vili), then £ is a super- operator. 

The following theorem gives two elegant representations of quantum op- 
erations. 

Lemma 2.1 Section 8.2.3; Theorem 8.1) The following statements 

are equivalent: 

1. £ is a super- operator on Hilbert space 7i; 

2. (System- environment model) There are an environment system E with 
state space He, and a unitary transformation U and a projector P on 
H^He such that£{p) = trE[PU{p®\eo){eQ\)U'^ P] for any p G V{n), 
where {\ek)} is an orthonormal basis of He, andtrE{cr) = J2ki^k\o'\ek) 
for any a G V{H He); 
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3. (Kraus operator-sum representation) There exists a set of operators 
{Ei} on 7i such that EjSi < I and£{p) = 'Y^ - EipE\ for all density 
operators p G DiTC). We often say that E is represented by the set {E^} 
of operators, or {Ei} are operation elements giving rise to £ when £ 
is given by the above equation. 

2.6 Diamond distance between super-operators 

For any positive operator A, if A = Yli -^110(^15 -^i ^ ^or all i, is a spectral 
decomposition of A, then we define \/]4 = \/AilO(^l- Furthermore, for 
any operator A, we define |^| = V A^A. One of the most popular metrics 
measuring how close two quantum states are, used by the quantum informa- 
tion community, is trace distance. For any p, a G DiTC), their trace distance 
is defined to be D{p, a) = ^tr\p — a\. D{p, a) quantifies the distinguishability 
between mixed states p and a. The following property of trace distance is 
needed in the sequel. 

Lemma 2.2 (1 13^ . Theorem 9.2) If £ is a trace-preserving super- operator 
on 7i, then D{£{p),£{a)) < D{p,a) for any p,a £ ViTL). 

The notion of trace distance can be extended to the case of super- 
operators in a natural way [8j. For any super-operators £i, £2 on Ti, their 
diamond trace distance is defined to be 

Do{£i,£2) = sup{Z)((fi 

{£2®Tw){p)) : pev{n(^n')} 

where TC' ranges over all finite-dimensional Hilbert spaces. Dc{£i,£2) char- 
acterizes the maximal probability that the outputs of £1 and £2 can be 
distinguished for the same input. 

3 Syntax and Operational Semantics 
3.1 Syntax 

Let Chan be the set of names for quantum channels, and let Var be the set 
of quantum variables. It is assumed that Var is a countably infinite set. We 
shall use meta-variables c, d, .. to range over Chan and x,y,z,... to range 
over Var. Let r be the name of silent action. 

For each quantum variable x G Var, imagine that we have a quantum 
system named by x. Let 7ix be a finite-dimensional complex Hilbert space. 
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which is the state space of the x— system. For any x,y E Var, if Hx = Hy, 
then it is said that x and y have the same type. Imagine further that there is 
a big quantum system composed of all x— systems, x G Var, in which all of 
our quantum processes live. We call this composed system the environment 
of our calculus. Put Hx = ^x&x for any X C Var. Then H = Hvar 
is the state space of the environment. Note that H is a countably infinite- 
dimensional Hilbcrt space. 

We assume a set of process constant schemes, ranged over by meta- 
variables A, B, .... For each process constant A, a nonnegative arity ar{A) is 
assigned to it. Let x = xi, be a tuple of distinct quantum variables. 

Then A(x) is called a process constant. 

We write V for the set of quantum process, and we write fv{P) for the 
set of free quantum variables in P for each quantum process P e V. Now 
we are ready to present the syntax of qCCS. 

Definition 3.1 Quantum processes are defined inductively by the following 
formation rules: 

1. each process constant A{x) is in V and fv{A{x)) = {x}; 

2. nil G V and fv{niV) = 0; 

3. ifPe V, then t.P G P and fv{T.P) = fv{P); 

4- if P E V, X is a finite subset of Var, and S is a super- operator on 
Hx, then S[X].P e V and fv{£[X].P) = fv{P) U X; 

5. ifPe V, then clx.P G V, and fv{clx.P) = fv{P) - {x}; 

6. if P eV and x ^ fv{P), then c\x.P G V, and fv{c\x.P) = fv{P) U 

7. ifP,Qe V, then P + Q € V and fv{P + Q) = fv{P) U fv{Q); 

8. ifP,QeV and fv{P) n fv{Q) = 0, then P\\Q G V and fv{P\\Q) = 
fv{P)Ufv{Q); 

9. if Per and LC Chan, then P\L G V and fv{P\L) = fv{P). 

The syntax of qCCS is similar to that of classical CCS. The only dif- 
ferences between them are: (i) Clause 4 in the above definition allows us 
to perform quantum operations on some involved systems; (ii) Condition 
X ^ fv{P) in clause 6 and condition fv{P) fl fv{Q) = in clause 8 are 
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required due to the well-known fact that unknown quantum information 
cannot be perfectly cloned. It is worth noting that these conditions force us 
to assign a set of free quantum variables to each process constant in advance. 
Quantum operations described in clause 4 may be thought of as constructs 
for sequential quantum computation. There are also constructs for sequen- 
tial computation in the value-passing CCS, but they are not explicitly given. 
There these constructs are implicitly assumed in value expressions (see 
page 55) so that one can focus his attention on examining communication 
behaviors between processes. However, we explicitly present the constructs 
for sequential quantum computation in the syntax of qCCS, and it is one 
of our main purposes to observe interaction between sequential quantum 
computation and communication of quantum information. 

There are two kinds of binding in our language for quantum processes: 
the restriction \L binds all channel names in L, and the input prefix c!x 
binds quantum variable x. The symbol will be used to denote alpha- 
convertibility on processes defined by replacing bound quantum variables in 
the standard way. 

For each process constant scheme A, a defining equation of the form 

^ def ^ 

A{x) = P is assumed, where P is a process with fv{P) C {x}. Recursive 
definition in qCCS is different from that in classical CCS in some intricate 

def 

way. Fox example, in qCCS, A{x) = c\x.A{x) is not allowed to be the 
defining equation of process constant scheme A. In fact, if x G var{A{x)) 
then c\x.A{x) is not a process, and if x ^ var(A{x)) then fv{clx.A(x)) % 

def 

var{A{x)). However, A{y) = c7x.clx.A{y) is a legitimate defining equation 
of ^. 

If / is a bijection from Var onto itself, then / induces naturally an 
isomorphism from TC onto itself. For simplicity, it is also denoted by /. 
Precisely, the isomorphism f : TC ^ TC is defined as follows: 

/( (g) = (g) \V>x)f(^) 

x^Var xdVar 

for any \lPx) G TCx, x G Var. Furthermore, it induces a bijection / : T>{TC) — > 
V{TC). For any p = J2i Pi\^i) i^il ^ ^('^)) where \ipi) G TC for all i, we have: 
fip) = EiPil/(v'i))(/(<^i)l- In particular, if /(x) = y,f{y) = x and f{z) = z 
for all z ^ x,y, then f{p) is often written as p{y/x}. 

For any super-operator £ on TCx, we define super-operator £f on TCf(^x) 
by Sf = f\x o £ o {f\x)~^, where f\x is the restriction of / on X, which is 
obviously a bijection from X onto f{X). 
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fl 



if 




Definition 3.2 A substitution of quantum variables is a bijection / from 
Var onto itself satisfying 

1. X and f{x) have the same type for all x G Var; and 

^- f\var-x = Idvar-x for some finite subset X of Var, where Idy stands 
for the identity function on Y. 

It is common that two different classical variables can be substituted by 
the same variable. But it is not the case in qCCS because a substitution 
is required to be a bijection. Such a requirement comes reasonably from 
our intention that different variables are references to different quantum 
systems. 

Let P £ V and / be a substitution. Then Pf denotes the process 
obtained from P by simultaneously substituting f{x) for each free occurrence 
of X in P for all x. Formally, we have: 

Definition 3.3 For P &V, Pf is defined recursively as follows: 
1. if P is a process constant A{xi, ...,Xn) then 



2. ifP = nil then Pf = nil; 

3. ifP = T.P' then Pf = r.P'f; 

4. ifP = £[X].P' then Pf = Sf[f{X)].P'f; 

5. if P = clx.P' then Pf = c7y.P'{y/x}fy, where y ^ fv{c!x.P) U 
fv{P'f), and fy is the substitution with fy{y) = y and fy{z) = f{z) 
for all z ^ y; 

6. ifP = dx.P' then Pf = c\f{x).P'f; 

7. ifP = Pi + P2 then Pf = PJ + P2f; 



Pf = A{f{xi),...J{xn)); 
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8. ifP = Pi\\P2 thenPf = Pif\\P2f; 

9. ifP = P'\L then Pf = P'f\L. 

Note that in clause 4 a corresponding modification on super-operator 
£ is made when substituting quantum variables in X. In addition, the re- 
quirement that / is one-to-one becomes vital when we consider substitution 
of output prefix in clauses 6 and of parallel composition in clause 8; for ex- 
ample, if f{x) = f{y) = X, Pi = dx.dly.nil and P2 = c!x.nil||d!y.nil, then 
Pi/ = dx.dlx.nil and P2/ = c!x.nil||(i!a;.nil are not processes. 

If {Pf)f^^ = P; that is, it is not allowed to have variable conflict where 
f{x) G fv{P) — {x} for some x G fv{P), then Pf is said to be well-defined. 
In what follows we always assume that Pf is well-defined whenever it occurs. 

Let X = xi, ...,Xn and y = yi, ...,yn- If fixi) = yi {1 < i < n), we write 
P{y/x} or P{yi/xi,...,yn/xn} for Pf. 

3.2 Operational Semantics 

For any X C Var and super-operator £ on Hx, the cylindric extension of 

def 

f on 7^ is defined to be fx = £ ^Hvar-x where luvar-x '^^ identity 
operator on TCvar-x- In what follows we always assume that X is a finite 
subset of Var and £^ is a super-operator on Hx whenever £x is encountered. 

A configuration is defined to be a pair {P, p) where P G 7^ is a process, 
and p G V{H) specifies the current state of the environment. Intuitively, 
p is an instantiation (or valuation) of quantum variables. Instantiations of 
classical variables can be made independently from each other, but quantum 
systems represented by different variables may be correlated because p is 
allowed to be an entangled state. The set of configurations is written Con. 

We set Act = {r} U Actop U Actcom for the set of actions, where Actop = 
{£[X] : X is a finite subset of Var and £ is a super — operator on Hx} is 
the set of quantum operations, and Actcom = {c7x, c!x : c G Chan and x G 
Var} is the set of communication actions, including inputs and outputs. 
The set Act will be ranged over by meta-variables a, (3,.... We need the 
following notations for actions: (1) For each a G Act, we use cn{a) to stand 
for the channel name in action a; that is, cn{c7x) = cn{c\x) = c, and cn(T) 
and cn{£[X]) are not defined. (2) We write fv{a) for the set of free variables 
in a; that is, fv{c\x) = {x}, fv{£[X]) = X, fv{T) = fv{c7x) = 0. (3) We 
define bv{a) to be the bound variable in a; that is, hviclx) = x, and bv(T), 
bv{£[X]) and bv{c\x) are not defined. 
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Then the operational semantics of qCCS is given as a transition system 
{Con, Act, where the transition relation — is defined by the following 
rules: 



Tau : 



Oper 



Def 



{£[X].P,p)'^^ {P,£x{p)) 



Input : -J- y ^ fv{c7x.P) 

{c?x.P,p) -^{P{y/x},p) 

Output 



Choice : 



{dx.P,p)'^{P,p) 



{P,p)^{P',p') 
{P+Q,p)^{p',p') 



IntU: ^^'^^'^J^';^'^ , xifv{Q) 
(P||Q,p)^-l(P'||Q,p') 

Intl2: {P^P)^^{P';P') ^ not an input 

{P\\Q,p)^{P'\\Q,p') 



Comm : 



Res : 



{P,p)''^ {P',p) {Q,p)'H{Q',p) 
{P\\Q,p)^{P'\\Q',p) 

{P\L,p)^{P\L,p') ^ 

{P{y/x},p)^{P',p') ^(~.%fp 
{A{y),p)^{P',p') ^ ' 



The symmetric forms of the Choice, Intll, Intl2 and Comm rules are 
omitted. 

In the output transition {c\x.P,p) ^ {P,p), the x— system is sent out 
through channel c. Note that the current state of the x— system is specified 

in p. But p is not necessary to be a separable state, and it is possible 
that the x— system is entangled with the y— system for some y G Var — 
{x}. Moreover, the entanglement between the x— system and the y— systems 
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(y ^ Var — {x}) is preserved after the action dx. The input transition 

{c7x.P, p) ^ {P{y/x}, p) means that the y— system is received from channel 
c and then it is put into the (free) places in P indicated by x (There may be 
more than one free place indicated by a single variable x in P because it is 
not required that fv{P)r\fv{Q) = in sum P + Q). It should be noted that 
in clx.P the variable x is bound and it does not represent concretely the 
X— system. Instead it is merely a reference to the place where the received 
system will go. Thus, clx.P can perform action c!y with y ^ x. The 
side condition y ^ fv{clx.P) for the input transition is obviously to avoid 
variable name conflict, and it also makes that Pjy/x} is well-defined. During 
performing both the input and output actions, the state of the environment 
is not changed. Passing quantum systems happens in a communication 
described by the Comm rule, but it is realized in the call-by-name scheme 
and does not change the state of the environment. 

Note that it is required that fv{P') n fv{Q') = to guarantee that the 
Comm rule is reasonable. The verification of this condition is postponed 
to the end of Lemma 13. 2i The same happens to the Intll and Intl2 rules. 

3.3 Examples 

To illustrate the transition rules introduced in the last subsection, we give 
some simple examples. 

Example 3.1 Let Pi = c?y.P[, P2 = clx.P^ and P = (Pi||P2)\c. Then 
for any p, the only possible transition of P is {P, p) {{P[{x/y}\\P2)\c, p) . 
Note that in this transition the x— system is passed from P2 to Pi but the 
state p of the environment is not changed. This is reasonable because p 
does not contain any position information of the quantum systems under 
consideration. 

IfQi = c7y.H[y].Q[, Q = {Qi\\P2)\c, and p = |0)^(0| ^ p' where p' G 
(Q,p)^((F[x].Q;{xM||P^)\c,p) 

((QU^MII^2)V,l+).(+l®p'). 

At the beginning of the transition the state of the x— system is |0). Then 
the X— system is passed from P2 to Qi and the Hadamard transformation 
is performed on it at Qi. The state of the x— system becomes \+) after the 
transition. 
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Suppose that Ri = c?y.CNOT[y, z].R[, R = {Ri\\P2)\c and a = 
\+)x{+\ ® |0)^(0| a' where p' G V{nvar-{x,z})- Then 

{R,a) ^ {{CNOT[x,z].R[{x/y}\\P^)\c,a) 

c^OT[.,z] ((^;{^/y}||p^)\c,|/3oo)..(/?oo| g^O- 

The X— system is passed from P2 to Ri, and then the CNOT operator is ap- 
plied to it and the z— system together. It is worth noting that the state of the 
xz— system is separable before the transition, but an entanglement between 
the x— system and the z— system is created at the end of the transition. 

Let Si = c?y.CNOT[y,z].Mo,i[z].S[, R = {Si\\P2)\c, where Mo,i is the 
operation generated by the measurement of single qubit in the computational 
basis \0), with the measurement result unknown; that is, Aio^i{p) = 
PopPo + PipPi for each p E P(7^2), where Pq = |0)(0| and Pi = |1)(1|. 
Then 

{S,a) ^ {{CNOT[x,z].MoM-S[{x/y}\\Pi)\c,a) 
CNOT[.,z] (^^MoA^]-S[{x/y}\\Pi)\c,\Poo).z{Poo\'^<r') 

{iS[{x/y}\\P^)\c, ^(|00).,(00| + |11)..(11|) a'). 

In the last transition the measurement in computational basis \0), |1) is per- 
formed on the z— system. We can see that the x— system and the z— system 
are always in the same state in the last configuration. This is because they 
are entangled before the measurement. 

Example 3.2 Quantum noisy channel. We imagine a simple scenario where 
Alice sends quantum information to Bob through a quantum noisy chan- 
nel. Usually, a quantum noisy channel is represented by a super- operator 
£ (see Chapters 8 and 12 of 113]). Thus, Alice and Bob may be described 
as processes: P = c\\x.P' , Q = C2?z.(5' respectively, and the channel is de- 
scribed as a nullary process constant scheme C whose defining equation is 

def 

C = ci7y.£[y].C2ly.C. Put S = {P\\C\\Q)\{ci,C2}. If information that Alice 
wants to send is expressed by a quantum state p of the x— system, then for 
any p' £ 'T>{'Hvar-{x}), we have: 



{S,p0p') ^ {{P'\\£[x].C2\x.C\\Q)\{ci,C2},p^p') 

{{P'\\c2\x.C\\Q)\{ci,C2},£{p)'i^p') 
^{iP'\\C\\Q'{x/z})\{ci,C2},£{p)0p'). 
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{S',p |eo)(eo| /) ^ {{P'\\£u[{x, E}].£p[{x, E}].£trT [{x, E}].C2\x.C'{E)\\Q)\{ci,C2}, p |eo)(eo| ® 

^HKi^}] ((p'||f^^^[{^,i^}].c2!x.C"(i?)||g)\{ci,C2},PC/(p0|eo)(eo|)t/tp®/) 
^-^[i,-'^>l ((p'||c2!x.C"(i?)||Q)\{ci,C2},^(/9) |eo)(eo| p") 
^ ((P'||C'(i^)||Q'{x/z})\{ci,C2},f(p) |eo)(eo| 0/). 



Note that fv{C) does not contain y; otherwise C is not a process. Thus, 
C{x/y] = C. 

Moreover, suppose that a system- environment model of £ is given as in 
Theorem \2.1[ l. Let £u , £p and £trE be super- operators onTLx^TtE, defined 
as follows: <?{/(cj) = UaU\ £p{a) = PaP, and 

£trE{(^) = X](efc|o-|efc) O |eo)(eo| 

i 

for all a £ 'D{TCx ®'He)- We define process constant scheme C by 
C'{E) =^ ci7y.£u[{y,E}].£p[{y,E}].£trA{y^E}].C2yl.C'{E), 

and put S' = (P||C7'(S)||(5)\{ci,C2}. Then for all p E ViH^) and p" £ 
'^i'^Var-{x,E})! ^hc transitions of S' are displayed in Eq. (CP (see page 7). 

Example 3.3 Approximate quantum copier. Suppose that an agent Q wants 
to copy a (unknown) quantum state, Q sends the state to a copier P through 
channel c, and P receives it and put it at place y (the original mode). First, 
P has to ask for a new place from another agent R as the copy mode. Then P 
performs a copying operation on the original and copy modes together, which 
is represented by a unitary transformation U, independent of the input state. 
Finally, P will send two (approximate) copies of the original state back to 
Q through channel c. So, P, Q, R and the whole system S may be described 
as follows: P = cly.dl z.U[y, z\.c\y.c\z.P, Q = c\x.c7u.c?v.Q' , R = dlxo-nil, 
and S = (P||Q||i?)\{c, d}. Note that P is a nullary process constant scheme 
and y,z ^ fv{P). 

Let p = \^)x{^\ ® |0)x„(0| ®CF, where a G T){Hvar-{x,xo})^ W) ihe 
state to be copied, and the initial state of the copy mode is assumed to be 
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|0). Then the copying process is described by the following transitions: 

{S,p) ^ {{d?z.U[x, z].c\x.clz.P\\c?u.c7v.Q'\\R)\{c,d}, p) 
^ {{U[x, xo]-clx .c\xq.P\\c7u.c?v .Q' \\nil)\{c, d}, p) 

'^^-A °' {{c\x .clxo ■P\\c?u.c7v .Q' \\nil)\{c, d}, p) 
^ {{c\xo.P\\c7v.Q'{x/u}\\nil)\{c, d}, p') 
^{P\\Q'{x/u}{xo/v}\\nil)\{c,d},p'), 

where it is supposed that U\ip)x\0)xo = \^')x\^')xoj o.f^d p' = \ip')x{^'\ ® 
® ^- Wootters-Zurek no-cloning theorem 116] excludes the 

possibility that for all \ip) G 7ix, \'-p') = \'^). But it is shown by Buzek and 
Hillery /i / that there exists a (universal) copier P which approximately copies 
the input state \ip) such that the quality of the output state | measured 
by the Hilbert- Schmidt norm of the difference between \ip) and \ip'), does not 
depend on \lp). 



3.4 Properties of Transitions 

We now present some basic properties of the transition relation defined in 
Section 3.2. Their proofs can be carried out by induction on the depth of 
inference. Some of them need very careful analysis, but we have to omit 
them because of limited space. 

First, we observe how does the environment of a configuration change in 
a transition. 

Lemma 3.1 1. If {P, p) {P\p'), then 

(a) p' = £x{p); and 

(b) {P,a) {P',£x{(y)) holds for all a G V{n). 

2. If {P, p) —> {P', p') and a is not of the form £[X], then 

(a) p = p' ; and 

(b) {P,a) (-P'lf) holds for all a S V{Tl). Thus, we can simply 
write P P' . 

Next we see how are the variables in an action related to the free variables 
of a process performing this action and those of the process immediately after 
it. 
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Lemma 3.2 If{P,p) A {P',p'), then 

1. fv{a) C fv{P) - fv{P'); and 

2. fv{P') C fv{P) U {hv{a)}. 

This lemma enables us to verify that the IntU, Intl2 and Comm rules 
are well-defined. We only consider Comm for instance: if {P^p) ^ {P'^p) 
and {Q,p) ^ {Q',p), then using the above lemma we obtain fv{P') C 
fv{P) U {x}, fv{Q') C fv{Q) and x ^ fv{Q'). This obviously leads to 
fv{P') n fv{Q') = because P\\Q G V and fv{P) n fv{Q) = 0. 

The next lemma shows that the variable in an input can be changed in 
a transition provided a corresponding modification of the process after the 
transition is made. 

Lemma 3.3 // {P, p) ^ {P',p) and y ^ fv{P), then {P,p) ^ {P",p) for 
some P" =a P'{y/x}. 

The following two lemmas carefully examine interference of substitution 
and transition. Let / be a substitution. Then we define its extension on 
actions by: /(r) = r, f{S[X]) = Sf[f{X)], f{c?x) = c?x, and f{c\x) = 
c\f{x). 

Lemma 3.4 //(P,p) ^ (P',p') and f{bv{a)) = bv{a), then {Pf,f{p)) 
{P",f{p')) for some P" P'f. 

Lemma 3.5 // {Pf,f{p)) {Q,cr) and f{bv{a)) = bv{a), then for some 
(3, P' and p', {P,p) ^ {P',p'), Q =„ P'f, a = f{p') and a = /(/?). 

Finally, we exhibit a certain invariance of transitions under a— conversion. 

Lemma 3.6 Let Pi =a P2- Then 

1. if {Pi,p) {P{,p') and a is not an input, then (P2,p) — > (P2,p') for 
some P2 =a Pi; 

2. if {Pi,p) {P[,p), then for any y ^ fv{P2), {P2,p) {P^,p) for 
some P2 =a Pi{y/x}. 
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4 Strong Bisimulations 

4.1 Basic Definitions 

We first introduce the notion of strong bisimulation on configurations. 

Definition 4.1 A symmetric relation TZ C Con x Con is called a strong 
bisimulation if for any {P,p),{Q,a) G Con, {P,p)TZ{Q,a) implies, 

1. whenever {P, p) A {P',p') and a is not an input, then for some Q' 
and a', {Q,a) A {Q',a') and {P',p')n{Q',a'); 

2. whenever {P,p) ^ {P'lP) ci'^d x ^ fv{P) U fv{Q), then for some Q' , 

{Q,a) {Q',a) and for ally ^ fv{P')Ufv{Q')-{x}, {P'{y/x},p)n{Q'{y/x},a). 

It sliould be noted tiiat in Clause 2 we require y ^ fv{P')Ufv{Q') — {x}. 
If we would not put tiiis requirement, then two previously different quantum 
states may become the same state after substitution {y/x}. This is forbidden 
by the no-cloning theorem of quantum information. 

Then we are able to define strong bisimilarity between configurations in 
a familiar way. 

Definition 4.2 For any {P,p), {Q,cr) G Con, we say that {P, p) and {Q,a) 
are strongly bisimilar, written {P, p) ~ {Q,a), if {P,p)TZ{Q,a) for some 
strong bisimulation TZ; that is, strong bisimilarity on Con is the greatest 
strong bisimulation: 

~ = (^{'7^ -.TZ is a strong bisimulation}. 

Now strong bisimilarity between processes may be defined by comparing 
two processes in the same environment. 

Definition 4.3 For any quantum processes P,Q ^T', we say that P and Q 
are strongly bisimilar, written P ^ Q, if {P, p) ~ {Q,p) for all p G V{J-L). 

The following lemma gives a recursive characterization of strong bisimi- 
larity between configurations, and it is useful in establishing strong bisimi- 
larity between some processes. 

Lemma 4.1 For any {P,p), {Q,o-) G Con, {P,p) ^ {Q,(t) if and only if, 

1. whenever {P, p) A {P\p') and a is not an input, then for some Q' 
and a', {Q,a) A {Q',a') and {P',p') ~ {Q',(t'); 
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2. whenever {P, p) ^ {P' t p) o^f^d x ^ fv{P) U fv{Q), then for some Q' , 
{Q,a) {Q',a) and for all fv{P')Ufv{Q')-{x}, {P'{y/x},p) ~ 
{Q'{y/x},a), 

and the symmetric forms of 1 and 2. 

Proof. Similar to the proof of Proposition 4.4 in [11]. □ 

In the remainder of this section we are going to present some fundamental 

properties of strong bisimilarity. First, we show that strong bisimilarity is 

preserved by a— conversion. 

Proposition 4.1 If Pi =« P2, then Pi ~ P-^,. 

Proof. It is easy to show that TZ = {{{Pi, p) , {P2, p)) : Pi =a P2} is a 
strong bisimulation by using Lemma l3. 61 □ 

4.2 Monoid Laws, Expansion Law and Congruence 

The monoid laws and the static laws in classical CCS can be easily general- 
ized to qCCS. 

Proposition 4.2 For any P,Q,R£ V , and K,L Q Chan, we have: 

1. P + Qr^Q + P; 

2. P + {Q + R)^{P + Q) + R; 

3. P + Pr^ P; 

4. P + nil~P; 

5. P\\Q^Q\\P; 

6. P\\{Q\\R) ^ {P\\Q)\\R- 

7. P||nil~P; 

8. P\L P if cn{P) f] L = 9, where cn{P) is the set of free channel 
names in P; 

9. {P\K)\L P\{KUL). 
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Proof. The items 1-4 may be proved by using Lemma l4.ll and the items 
5-9 may be proved by constructing appropriate strong bisimulation. Here, 
we only prove 6 as an example. Put 



7^ = {((p||(Q||i^),p),((p||Q)p,p)): 

P,Q,R£V and peV{n)} 

It suffices to show that 7^ is a strong bisimulation. Suppose that 

{Pm\R),p)^{S,p'). (2) 

We only consider the following two cases, and the others are easy or similar. 

Case 1. The transition ([2]) is derived from {Q, p) ^ (Q', p) and {R, p) ^ 
{R',p') by Comm. Then a = r, p' = p and 5 = P|| (Q'||i?'). It follows from 
Lemma E2] that x G fv{R). This leads to x ^ fv{P\\Q) = fv{P) U fv{Q) 
because (P||Q)||i? G V. Consequently, we may apply the Intll rule to 

assert that {P\\Q,p) {P\\Q',p), and furthermore by the Comm rule 
we obtain {{P\\Q)\\R, p) {{P\\Q')\\R' , p) . Now it suffices to note that 
{S,p)n{{P\\Q')\\R',p). 

Case 2. a = c?x, x i jv{P\\{Q\\R)) U jv{{P\\Q)\\R) = fv{P) U fv{Q) U 

fv{R), and the transition ([2]) is derived from {P, p) {P' ■, p) by Intll. 
Then p' = p and S = P'||(Q||i?). Since x ^ fv{Q), it follows from the 

Intll rule that {P\\Q,p) "-5 {P'\\Q,p). We also have x ^ fv{R). Then 

using the Intll rule once again we obtain {{P\\Q)\\R, p) {{P'\\Q)\\R, p) . 
Finally, we note that for each y ^ fv{P'\\{Q\\R)) U fv{{P'\\Q)\\R) - {x}, 
S{y/x} = P'{y/x}\\{Q\\R), 

i{P'\\Q)\\R){y/x} = {P'{y/x}\\Q)\\R, 

and {S{y/x},p)n{{iP'\\Q)\\R){y/x},p). □ 

Proposition 4.3 (Expansion law) For any P,Q£V, we have: 

{P\\Q)\L ~ Y,{a.{P'\\Q)\L -.P^P' and cn{a) i L] 

+ ^{a.(P||Q')\-^^ -.Q^Q' and cn(a) ^ L} 
+ Y.{t.{P'\\Q')\L : P P' and Q Q\ 
oxP'-^P' and Q Q'}. 
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Proof. Write S for the process in the right-hand side. Then we can show 
that {{P\\Q)\L, p) ~ {S,p) for all p G T>{TC) in a way similar to that in 
classical CCS (see [11], Proposition 4.9). □ 

The following lemma indicates that strong bisimilarity is preserved by 
substitution. Its proof requires careful manipulation of variables, and is 
omitted here to save space. 

Lemma 4.2 For any P,QgV and for any substitution f , P ^ Q if and 
only ifPf^Qf. 

Now we are ready to show that strong bisimilarity is a congruence rela- 
tion with respect to all combinators in qCCS. 

de f 

Proposition 4.4 1. If A = P then A ~ P. 
2. If P ^ Q, then we have: 

(a) T.P ~ T.Q; 

(b) £[X].P^£[X].Q; 

(c) clx.P ~ dx.Q; 

(d) clx.P ~ clx.Q; 

(e) P + Rr^Q + R; 

(f) P\\R ~ Q\\R; 

(g) P\L ~ Q\L. 

Proof. The proofs of 1, 2(a)-2(c) and 2(e) are routine applications of 
Lemma [4.H and 2(d) may be proved by using Lemmas I4.1l and l4.2[ For 2(g), 
we only need to show that TZ = {{{P\L, p) , {Q\L,a)) : {P, p) ~ {Q,cr)} is a 
strong bisimulation, and the routine details are omitted. Here, we present a 
detailed proof of 2(f). It is not a straightforward generalization of the proof 
for classical processes, and it requires a new idea in constructing a strong 
bisimulation equating P\\R and We define 7?. to be a binary relation 

between configurations, consisting of the pairs: 

((Piii?,4^4:vg:;)4::;\..4;)4\)4^p)), 
(giii?,^(r)4;4::;)4::;\..4;)4VS)(.))), 

where n > 0, R ^ V , Xi (1 < i < n) and Yi (0 < i < n) are finite subsets 

of Var, 4^ is a super-operator on Tixi each 1 < i < n, and J-y'' is a 
super-operator on T^y. for each < i < n, and 

(p,4;4-;l.4)(p)) ~ (Q,4j4-;L.4)(a)). 
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The idea behind the definition of TZ is that we can insert an arbitrary quan- 
tum operation J^y^ between two existing previously quantum operation 
and £x^^^ for any 1 < i < n — 1, and we can also insert an arbitrary quan- 
tum operation J^^^ after the last operation £^^^ and insert J-yJ before the 

first operation Sx}- The technique of insertion is unnecessary in the classi- 
cal value-passing CCS from which sequential computation is abstracted by 
assuming value expressions (see p[T|, page 55). However, it is indispensable 
in qCCS where one has to consider interference between sequential quantum 
computation and communicating quantum systems. 
For simplicity, we write A = S^^S^ ■■■^Xi ^^'^ 

_ (n) r.{n) ^(n-1) r.(n-l) ^(1) ^(1) ^-(0) 

If P ~ Q, then for each p, {P, p) ^ {Q,p), and it implies {P\\R, p)TZ{Q\\R, p) 
by taking n = and J^y^^ = Ihyq ^- Therefore, it suffices to show that 
7?. is a strong bisimulation. 

Suppose that {P,A{p)) ~ {Q,A{(j)) and 

{P\\R,B{p))^{S,p') (3) 

We consider the following four cases: 

Case 1. a = T. We have p' = B{p), and this case is divided into the 
following four subcases: 

Subcase 1.1. The transition ([3]) is derived by Intl2 from {P,B{p)) 
^ {P',B{p)). Then S = P'\\R. By Lemma O we obtain {P,A{p)) ^ 
{P',A{p)). Since {P,A{p)) ~ (Q, ^(a)), it holds that (Q, ^(ct)) ^ {Q',A{a)) 
for some Q' with {P',A{p)) ~ {Q',A{a)). Applying Lemma [3T] once again 
we have {Q,B{a)) {Q' ,B{a)), and the Intl2 rule allows us to assert that 
{Q\\R,B{a)) ^ {Q'\\R,B{a)). It is easy to see that {S, p')TZ{Q'\\R,B{(t)) 
from the definition of IZ. 

Subcase 1.2. The transition ([3]) is derived by Intl2 from {R,B{p)) —>■ 
{R',B{p)). Then S = P\\R', and from Lemma O and the IntI2 rule it 
follows that {R,B{a)) ^ {R',B{a)) and {Q\\R,B{a)) ^ {Q\\R' ,B{a)). In 
addition, we have {S,p')n{Q\\ R',B{a)) because {P,A{p)) ~ {Q,A{a)). 

Subcase 1.3. The transition ([3]) is derived by Comm from {P,B{p)) 

{P',B{p)) and {R,B{p)) ^ {R',B{p)). First, we have (P,^(/9)) '-5 {P',A{p)) 

and {R,B{a)) ^ {R',B{a)) by using Lemma l3.ll With Lemma [3.21 we 
see X G fv{R). Note that /u(P) n fv{R) = fv{Q) n fv{R) = 0. Thus, 



24 



X ^ fv{P)Ufv{Q). Since {P,A{p)) ~ {Q,A{a)), it follows that {Q,A{a)) "-^ 
{Q',A{a)) for some Q' with {P',A{p)) ~ {Q',A{a)). By Lemma O and 

the Comm rule we obtain {Q,l3{a)) {Q',l3{a)) and {Q\\R,B{a)) ^ 
{Q'\\R',l3{a)). Moreover, it holds that {S, p')n{Q'\\R' ,B{a)) . 

Subcase 1.4. The transition ^ is derived by Comm from {P,B{p)) ^ 

{P',B{p)) and {R,B{p)) '-^ {R',B{p)). Similar to Subcase 1.3. 

Case 2. a = Q[Z], where Z is a finite subset of Var, and ^ is a super- 
operator on Tiz- We have p' = QzB{p), and this case is divided into the 
following two subcases: 

Subcase 2.1. The transition ([3]) is derived by Intl2 from {P,B{p)) 

{P',QzB{p)). Then S = P'\\R. It follows from Lemma O that 

{P,A{p)) {P',gzA{p)), and {Q,A{a)) {Q',gzA{a)) for some Q' 
with {P',gzA{p)) ~ {Q',gzA{a)) because {P,A{p)) ~ {Q,A{a)). Hence, 

using Lemma [STTI once again we obtain {Q,B{a)) {Q' •,Qz^{<^)) - Con- 

sequently, using the Intl2 rule leads to {Q\\R,B{a)) {Q'\\R,gzB{a)) . 
Comparing carefully gzA and gzB, we see that gzB results from insert- 

i'^g ^Y„+l^ = '^nY„+^ = ^H,^Yj^^Y!Zl^^-^^n^^^! at appropriate posi- 
tions in gzA, where l^+i is an arbitrary finite subset of Var. This implies 
{S,p')n{Q'\\R,gzB{a)). 

Subcase 2.2. The transition ([3]) is derived by Intl2 from {R,B{p)) 

{R',gzB{p)). Then S = P\\R', and {R,B{a)) {R',gzB{a)) follows 

immediately by using LemmaEH Hence, {Q\\R,B{a)) {Q\\R' ,gzB{a)) . 
Let 

(n) 

Then /Cy^ is a super-operator on TCy^uz, and ^z^S is obtained by insert- 
ing appropriately f^Yr!uz^-^Yi-l^ ^ ■••'•^i^'-^o^ ™ Now it follows that 
(5,p')^(Qp,gz^(c7)") fiomXP, A{p)) ~ (Q,^(a)). 

Case 3. a = clx. We need to consider the following two subcases: 

Subcase 3.1. The transition ([3]) is derived by Intl2 from {P,B{p)) 
{P',B{p)). Similar to Subcase 1.1. 

Subcase 3.2. The transition ^ is derived by Intl2 from {R,B{p)) ^ 
{R',B{p)). Similar to Subcase 1.2. 

Case 4. a = c?x and x ^ fv{P\\R)U fv{Q\\R) = fv{P)Ufv{Q)Ufv{R). 
We have p' = B{p), and this case is divided into the following two subcases: 



c\x 
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Subcase 4.1. The transition ^ is derived by Intll from {P,B{p)) 

{P',B{p)). Then 5 = P'\\R, and using Lemma l3.1l we obtain {P,A{p)) ^ 
{P',A{p)). From {P,Aip)) ~ {Q,A{a)) and x i fv{P) U fv{Q), it fol- 
lows that {Q,A{a)) {Q',A{a)) for some Q' with for all y i fv{P') U 
fv{Q') — {x}, (P'{i//2;}, ~ {Q' {y / x] ^ A{a)) . Furthermore, we have 

{Q,B{a)) {Q',B{a)) by using Lemma [3.11 once again. Note that x ^ 

fviR). Thus, applying the Intll rule yields {Q\\R,B{a)) {Q'\\R,B{cj)). 
What remains is to verify that {{P'\\R){z/x},B{p))n{{Q'\\R){z/x}, B{a)) 
for all z ^ fv{P'\\R) U fv{Q'\\R) — {x}. To this end, we only need to note 
that {P'\\R){z/x} = P'{z/x}\\R{z/x}, {Q'\\R){z/x} = Q'{z/x}\\R{z/x}, 
and z i fv{P'\\R) U fv{Q'\\R) - {x} implies z ^ fv{P') U fv{Q') - {x}. 
Subcase 4.2. The transition ([3]) is derived by Intll from {R,B{p)) 

{R',B{p)). Then S = P\\R', and {R,B{a)) {R',B{a)) follows from 

Lemma l3. 11 Consequently, we may obtain {Q\\R,B{a)) {Q\\R',B{a)) by 
using the Intll rule, because x ^ fv{Q). So, we only need to show that for 
ally ^ fv{P\\R')uMQ\\R')-{x}, {{P\\R'){y/x},B{p))n{{Q\\R'){y/x},B{a)) 
Note that x ^ fv{P)Ufv{Q). Thus, it holds that {P\\R'){y/x} = P\\R'{y/x} 
and {Q\\R'){y /x} = Q\\R'{y/x}, and the conclusion follows immediately 
from the definition of TZ. □ 

4.3 Recursion 

We now assume a set of process variable schemes, ranged over by X, Y, .... 
For each process variable scheme X, a nonnegative arity ar(X) is assigned 
to it. If 5; = xi, ■■■,Xar(x.) is a tuple of distinct quantum variables, X(x) is 
called a process variable. 

Process expressions may be defined by adding the following clause into 
Definition 13.11 (and replacing the word "process" by the phrase "process ex- 
pression"): each process variable X(x) is a process expression and fv(X.(x)) = 
{x}. We use meta-variables E,F, ... to range over process expressions. 

Suppose that E is a process expression, and {Xj(xj) : i < m} is a family 
of process variables. If {Pi : i < m} is a family of processes such that 
fv{Pi) ^ {xi} for all i < m, then we write E{Xj(5;j) := Pi,i < m} for the 
process obtained by replacing simultaneously Xj{yj} in E with Pi{y/x} for 
all i < m. 

Definition 4.4 Let E and F be process expressions containing process vari- 
able schemes Xj (i < m) at most. If for all families {Pi} of processes with 
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fv{Pi) C {xi}, i < m, 

E{Xi(xO := Pi,i< m] ~ F{Xi(ii) := Pi,i < m}, 

then we say that E and F are strongly bisimilar and write E ~ F. 

We now present the main results of this subsection, but their proofs 
are omitted because of limited space. The next proposition indicates that 
recursive definition preserves strong bisimilarity. 

Proposition 4.5 Let {Ai : i < m} and {Bi : i < m} be two families of 
process constant schemes, and let {Ej : i < m} and {Fi : i < m} contain 
process variable schemes Xj (i < m) at most. If for all i < m, we have: 
Ej ~ Fj, and 

Aixi) '= Ei{Xj(xj) := Aj{xj),j < m}, 

Bi{xi) =^ Fi{X.j{xj) := Bj{xj),j < m}, 
then Ai{xi) ~ Biixi) for all i < m. 

A process variable scheme X is said to be weakly guarded in a process 
expression E if every occurrence of X in E is within a subexpression of the 
form a.F. 

The following proposition shows uniqueness of solutions of equations. 

Proposition 4.6 Suppose that process expressions Ej (i < m) contain at 
most process variable schemes Xj {i < m), and each Xj is weakly guarded 
in each Ej < m). If processes Pi and Qi {i < m) satisfy that, for all 
i < m, fv{Pi),fv{Qi) C {xi}, and 

Pi~Ei{Xj(ij) ■.= Pj,j<m}, 

Qi ~ Ej{Xj(xj) := Qj,j < m}, 
then Pi ~ Qi for all i <m. 

5 Strong Reduction-Bisimilarity 

Operation reduction between strings of actions is defined by the following 
two rules: if Xi is a finite subset of Var, £^^^ is a super-operator on Hxi for 
a\ll<i<n,X = Ur=i Xi, and 
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then 

Oper-Red 



String-Struct : ,J^Zit% 



where ti,t2 G Act* are any strings of actions. 

Operation reduction between processes is a natural extension of reduc- 
tion between strings of actions, and it is defined by the following structural 
rules: 

Act-Red ■ 0!l---(Xm ^ Pl---Pn 



Pre-Struct : 
Sum-Struct : 
Par-Struct : 

Res-Struct : 
Ref : 
Trans : 



P' 

5r 



a.P a.P' 

P ^ P' 
P + Q^P' + Q 

P ^ P' 
PWQ^P'WQ 

P ^ P' 
P\L P'\L 

P^P 

P^R 



The symmetric forms of the Sum-Struct and Par-Struct rules are 
omitted. 



Lemma 5.1 1. For any P E V, there exists a unique process, written 
[P], such that P — ^ [P], and [P] — Q does not hold for all Q eV. 

2. IfP^P', thenP' ^ \P]. 
Proof. Induction on the structure of P. □ 

By ignoring different decompositions of a quantum operation, we have: 
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Definition 5.1 Strong reduction-bisimilarity ~ is defined to be the transi- 
tive closure of c^, i.e., 

oo 

~ = U 

n=l 

where for any P,Q £ V, P ^ Q if there are Pi,P2,Qi and Q2 such that 
P ~ Pi ^ P2, Q ~ Qi ^ Q2 and P2 ~ Qa- 

P ~ Pi ^ P2 

Q ^ Qi ^ Q2 

Some basic properties of strong reduction-bisimilarity are presented in 
the following: 

Proposition 5.1 1. If P Q then P ^ Q. 

2. IfP^ P' then P ~ P' . In particular, if X = U"=i and 

8 = (£:(") 0Tx-xJ o ... o (£:{2) (^Ix-x,) o ®Tx^x,), 
then we have: 

(a) £W[x^].£m[X2]....S^^)[Xn].P ~ S[X].P- 

(h) A{x) ~ when process constant scheme A is defined by 

^(i) =^^:«[Xi].^:(2)[X2]....^:(")[x„].A(i), 

where {x} = IJ^Li ^i- 

3. ~ is an equivalence relation. 

4. IfP^Q then 

(a) a.P ~ a.Q; 

(b) P + R^Q + R; 

(c) P\\R ~ Q\\R; and 

(d) P\L ~ Q\L. 

Proof. (1), (2) and (3) are immediately from Definition 15. 11 and (4) may 
be easily proved by using Proposition 14. 4[ □ 
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6 Approximate Strong Bisimulations 

Let A be a nonnegative real number, and let 7^ be a binary relation between 
quantum processes. If for any P eV and p,a e 'D{7i), D{p, a) < X implies 
{P, p)TZ{P, a) , where D{-,-) stands for trace distance, then TZ is said to be 
A— closed. Now we are able to define approximate strong bisimulation. 

Definition 6.1 A symmetric, X— closed relation TZ C Conx Con is called a 
strong X— bisimulation if for any {P, p), {Q, a) G Con, {P, p)TZ{Q, a) implies, 

1. whenever a is t or an output and {P,p) {P',p), then for some Q', 
{Q,a) A (Q» and {P' , p)n{Q' ,a); 

2. whenever {P, p) {P',p'), then for some , Q' and a', {Q,a) 
{Q',a'), {P' , p')TZ{Q' , a') , and D^{£,T) < A, where diamond distance 
-Do(t) between super- operators is defined as in Subsection 2.6; 

3. whenever {P, p) {P':P) o-nd x ^ fv{P) U fv{Q), then for some Q' , 

{Q,a) {Q',a) and for ally ^ fviP')Ufv{Q')-{x}, {P'{y/x}, p)n{Q'{y/x},a). 

Definition 6.2 For any {P,p), {Q,cr) G Con, we say that {P, p) and {Q,a) 
are strongly X—bisimilar, written {P, p) ~a (Qj^)? ^/ (-Pj p)^(Q) cr) for some 
strong X— bisimulation TZ. In other words, strong X—bisimilarity on Con is 
defined by 

= tJ{^ : TZ is a strong X — bisimulation}. 
Definition 6.3 Let P,Q gT'. Then: 

1. We say that P and Q are strongly X—bisimilar, written P Qj if 
{P,p) ~A {Q,p) for allpeV{7i). 

2. The strong bisimulation distance between P and Q is defined by 

Dsb{P, Q) = inf{A > : P ~A Q}- 

The following characterization of A— bisimilarity between configurations 
is useful, and its proof is easy. 

Lemma 6.1 For any {P,p), {Q,cr) G Con, {P, p) ~a {Q,o') if and only if, 

1. whenever a is t or an output and {P, p) {P',p), then for some Q', 
{Q,a)^{Q',a) and {P',p)^x {Q',a); 
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2. whenever {P^ p) {P\ p') , then for some J- and Q' and a' , {Q^a) 
{Q',a'), {P',p') ~A andD4£,J^) < A; 

3. whenever {P, p) {P' ■, p) o-i^d x ^ fv{P) U fv{Q), then for some Q' , 

{Q,a) {Q\a) and for ally ^ fv{P')Ufv{Q')-{x}, {P'{y/x},p) ~a 
{Q'{y/x},a), 

and the symmetric forms of 1, 2 and 3. 

The next proposition shows that the process constructors introduced in 
qCCS are ah non-expansive according to pseudo-metric Dsb- 

Proposition 6.1 1. Strong bisimulation distance Dsb is a pseudo-metric 
on V . 

2. For any quantum processes P, Q, we have: 

(a) Dsb{c(.P,a.Q) < Dsb{P,Q) if oi is t, an output or an input; 

(b) Dsb{£[X].P,J^[Y].Q)<ma^{r]x,Y,D^{S,J') + Dsb{P, Q)}, where 
'O, ifX = Y, 

oo, otherwise; 

(c) Dsb{P + R,Q + R)< Dsb{P, Q); 

(d) Dsb{P\\R,Q\\R) < Dsb{P,Q) if all super- operators occurring in 
P, Q and R are trace-preserving; 

(e) Dsb{P\L,Q\L) < Dsb{P,Q). 

Proof. The proof of 1 relies upon the fact that if Ri is a strong Aj— bisimulation 
(i = 1, 2), then TZi o TZ2 is a strong (Ai + A2)— bisimulation, and we omit it 
here. 

2(a) is immediate from Lemma [6. 11 The proofs of 2(c) and 2(e) are easy. 
2(b). It is obvious for the case of X 7^ Y. Now assume X = Y. If 
D^{S,T) < A and Dsb{P,Q) < p, then there is p' < p such that P Q; 

that is, {P,cr) {Q,(^) for all a. For each p, we have {£[X].P, p) — > 

{P,£xip)) and {T[Y].Q,p) {Q,Tx{p))- Note that D{£x{p),:Fx{p)) = 
D{£{p),J'{p)) < D4£,r) < A and ~a is A-closed. Then {P,£x{p)) 
{Q,£x{p)) ~A {Q,J^x{p)), and{P,£x{p)) ~a+m' {Q,^x{p))- Prom LemmaO 
we see that {£[X].P,p) ~a+m' {HY]-Q^p)- Hence Dsb{£[X].P,J^[X].Q) < 
\+p' < X+p. This completes the proof by noting that A and p are arbitrary. 



VX,Y 
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2(d). For arbitrary A > 0, if Dsb{P,Q) < A, then there is /i < A 
such that P ~^ Q; that is, {P, p) ~^ {Q, p) for all p. Our purpose is 
to show that Dsb{P\\R,Q\\R) < A. To do this, we only need to find a 
strong /i— bisimulation 7^^ containing {{P\\R, p) , {Q\\R, p)) for all p. We 
can construct TZ^ by modifying TZ in the proof of Proposition I4.4l 2ff). Let 
T^fj. = Sfj^U TZ'^, where = {{{P, p), {P, a)) : D{p, a) < p,}, and TZ'^ consists 
of the pairs: 

((piii?,4:)4:)4::;)4::;)...4;)4Vg)(p)), 
(Qiii?,4^4:Vg:;)4::;\..4;)4;)4°)(a))), 

in which it holds that 

(p,4j4-;\..4)(p)) ~, (Q,4:)4::;\..4;)(a)). 

The difference between TZ in the proof of Proposition [131 2(f) and TZ'^ is that, 

in 7Z'^, 4^ s-'^d 4*^ allowed to be different {i < n). Now it suffices to 
show that TZf^ is a strong /i— bisimulation. It is obvious that TZ^ is /i— closed. 

Suppose that {P, p)B^{P,a) and (P, p) {P',p'). If a ^ ^ctop, then 
p' = p, and with Lemma [3T] we have (-P, cr) {P',o') and {P' , p')Bfj,{P' ,a) 
(for the case that a = c?x and x ^ fv{P), {P'{y/x}, p')B^{P'{y/x},a) for 
all y ^ fv{P') — {x}). If Q = £[X], then p' = £x{p), and by Lemma \J7U we 
obtain {P,a) (P', ^^(fT)). It follows from LemmaE^lthat D{p',£x{cr)) < 
D{p,a) < p and {P' , p')B^{P' ,£x{a)). 

Finally, we use the symbols A and B in the same way as in the proof of 
Proposition I4.4[ 2ff). and let A' and B' be obtained by replacing 4^ with 
£'xi < n) in ^ and B, respectively. Suppose that {P,A{p)) ~^ {Q,A'{(7)) 
and {P\\R, B{p)) {S,p'). We only consider the case that a = Q[Z] and 

the transition is derived by Intl2 from {P,B{p)) — > {P' ,GzB{p)) (and 
the other cases are the same as in the proof of Proposition I4.4[ 2ff)l. It 
holds that S = P'||-R and p' = QzB{p). An application of Lemma 13.11 

leads to {P,A{p)) {P',gzA{p)). Since {P,A{p)) {Q,A'{p)), there 

are G' and Q' such that {Q,A'{a)) {Q' ,g'zA' {a)) ~^ {P',gzA{p)) and 

Do{Q,Q') < p. Then, using Lemma 13. II once again, we obtain {Q,B'{a)) ^-^^ 

{Q',g'zB'{a)), and it follows that {Q\\R,B'{a)) {Q'\\R,g'zB'ia)). It is 
easy to see that {S , p')TZ'^{Q' \\R, g'^B' (a)) from the definition of TZ'^. □ 

An approximate version of strong reduction-bisimilarity can be defined 
in a natural way: 
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Definition 6.4 Let P,Q eV. Then: 

1. We say that P and Q are strongly X—reduction-bisimilar, written P 

Q, if there are n > 0, Ai,...,Ari > and Ri, R[, Rn, R'n G such 
that -^i ^ '^^d 

P ~ i?l ^'l ~ - ~ Rn ~A„ K ~ Q- 

2. The strong reduction-bisimulation distance between P and Q is defined 
by 

Dsrb{P,Q)=mi{X>0:Pr^x Q} 

Similar to Proposition 16.11 we have: 

Proposition 6.2 1. Strong reduction-bisimulation distance Dg^b is a pseudo- 
metric on V. 

2. For any quantum processes P, Q, we have: 

(a) Dsrbioi.P,a.Q) < Dsrb{P^Q) if Oi is t, an output or an input; 

(b) Dsrb{£[X].P,T[Y].Q) < max{r]x,Y,D4£,J^)+Dsrb{P, Q)}, where 
'O, ifX = Y, 

oo, otherwise; 

(c) DsrbiP + R,Q + R)< DsrbiP, Q); 

(d) D srb{P\\R-, Q\\R) < Dsrb{P-,Q) if all supcr- Operator s occurring in 
P, Q and R are trace-preserving; 

(e) D,rb{P\L,Q\L) < DsrbiP,Q)- 

Proof. 1. To show the triangle inequality: Dgrb{P,Q) + Dsrb{Q,P) 
> DgrbiPi R), it suffices to note that for any A,/i > 0, P ~a Q and 
Q ~^ R implies P ~a+^ R- This is immediate from the definition of strong 
A— reduction-bisimilarity. 

2. We choose to prove 2(b), and the proofs of the other items are similar. 
Assume that X = Y. For any A > 0, if P ~a Q, then we have P ~ Pi 
R[ ~ ... ~ Rn ~A„ R'n ^ Q fo'^ some Ri, R'l, Rn, R'n and Ai,...,A„ with 
X]"=i Aj < A. Then it follows from Propositions I5.ll 4 and 16. 11 2 that 

£[X].P ~^:[X].Pi ^d(£,:f)+x, nX].R[ ~ ... 

r^nx].Rn nx].Rn-nx].Q 
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On the other hand, we have {D(^{£, J^) + Ai) + A2 + ... + < D^{£, !F) + A. 
Thus, £[X\.P ^D(£,T)+x J^[X].Q. Therefore, 

Dsrb{S[X].P,J^[X].Q) < mf{D4£,:F) + A : P ~a Q} 
= D4£,J^)+Dsrb{P,Q)- □ 

A quantum process P G "P is said to be finite if it contains no process 
constants. We write P/m for the set of finite quantum processes. For any 
set of quantum gates, we write Vfin{^) for the set of finite quantum 
processes in which only gates from $7 and measurements in computational 
bases are used as quantum operations (cf. Clause 4 in Definition 13.11 and 
Example 12. 5p . By combining Propositions 15.11 2(a) and 16.21 2 we obtain: 

Corollary 6.1 IfQ is a universal set of quantum gates (e.g., the Hadamard 
gate, phase gate, CNOT, and vr/S gate (or the Toffoli gate)), then Vjini^) 
is dense in Vfm according to pseudo-metric Dgrb- 

7 Conclusion 

This paper defines an algebra qCCS of pure quantum processes and presents 
its transitional semantics. The strong bisimulation semantics of qCCS is 
established, and its modification by reduction of quantum operations is 
given. Furthermore, approximate versions of strong bisimulation and re- 
duction bisimulation are introduced. 

We conclude this paper by mentioning some topics for further studies. 
Several authors started to examine the role of entanglement in quantum 
sequential computation (see for example [7]). It seems that entanglement is 
much more essential in quantum concurrent computation. So, an interesting 
topic is to understand the role of entanglement in computation within the 
framework of qCCS. The most spectacular result in fault-tolerant quantum 
computation is the threshold theorem that it is possible to efficiently perform 
an arbitrarily large quantum computation provided the noise in individual 
quantum gates is below a certain constant (cf. [13], Section 10.6). This 
theorem considers only the case of quantum sequential computation. Its 
generalization in quantum concurrent computation would be a great chal- 
lenge. The bisimulation distances Dgi, and Dgrb introduced in this paper can 
be used to express certain fault-tolerance criteria. 
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8 Appendix: Proofs of Some Lemmas and Propo- 
sitions 

8.1 Proof of Lemma [372] 

This is carried out by induction on the depth of inference (P, p) {P',p'). 
We only consider the following cases: 

Case 1. The last rule is Intl2. Let P = Pi\\Q, {Pi,p) {P{,p') 
and P' = P{\\Q- Then the induction hypothesis indicates that fv{a) C 
fv{Pi) - fv{P[) and fv{P[) C fv{Pi) U {hv{a)}. It follows immediately 
that 

fv{P') = fv{P[) U fv{Q) C fv{P^) U {hv{a)} U fv{Q) 
= fv{P)U{bv{a)}. 

On the other hand, we have 

MPi) - fviP[) C fv{P^) U fviQ) - fv{Pi) U MQ) 

= MP) - fv{p') 

because fv{Pi) D fv{Q) = 0. This implies fv{a) C fv{P) - fv{P'). 

Case 2. The last rule is Comm. Suppose that P = Pi\\Q, {Pi,p) 

{P{,p), {Q,p) ^ {Q',p) and P' = P{\\Q'. Then a = r and fv{a) = C 
fv{P) — fv{P'). In addition, the induction hypothesis leads to fv{P') = 
fv{P{)Ufv{Q') C fv{Pi)U{x}Ufv{Q). we also have x G fv{Q)-fv{Q') C 
fv{Q). Thus, fv{P') C fv{Pi) U /r;(Q) = fv{P) = fv{P) U {bv{a)}. □ 

8.2 Proof of Lemma 13.41 

We prove the conclusion by induction on the depth of inference {P, p) 
{P',p'). The cases that the last rule is Tau, Output, Choice, IntI2 or 
Res are easy, and the cases that the last rule is Oper or Comm are similar 
to those in the proof of Lemma 13.51 below. So, we only consider the three 
two cases: 

Case 1. The last rule is Input. Let p = clx.Q. Then Pf = c!y.Q{y / x] fy 
where y ^ fv{c!x.Q) U fv{Qf), fy{y) = y and fy{u) = u for all n 7^ x. Sup- 
pose that 

(P,p) "^'^ {P' = Q{z/x},p' = p), 

where z ^ fv{c?x.Q). We now need the following: 

Claim, z ^ fv{c!x.Q) implies z ^ fv{c!y.Q{y/x}fy). 
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Indeed, if z G fv{c7y.Q{y/x}fy), then z G fv{Q{y/x]fy) and z / y. 
It follows that fv{Q{y/x}fy) C f{fv[clx.Q)) U {y} because = y and 

/jy(tt) = u for all u ^ X. Thus, we have z S f{fv{c?x.Q)) since z ^ y, and 
there exists u E fv{c7x.Q) such that z = /(f). Note that z = bv{a) and 
f(bv{a)) = bv{a). This leads to /(z) = z = f{y). Since / is one-to-one, it 
holds that z = v € fv{c7x.Q). 

By the above claim and the Input rule we obtain 

{Q{y/x}fy{z/y},f{p)). 

Finally, we have to show that Q{y/x}fy{z/y} =a Q{z/x}f = P'f. In fact, 
X is substituted by y in Q{y/x}, and fy{y) = y. Then x is substituted by 
z in Q{y/x}fy{z/y}. This is also true in Q{z/x}f because f{z) = z. If 
u G fv{Q) and u ^ x, then ti becomes = /(u) in Q{y/x}fy. Note 

that /(u) 7^ y. Otherwise, fy{u) = y = fy{y) and u = y because fy is 
one-to-one. This contradicts to y ^ fv{c!x.Q). Therefore, u is substituted 
by f{u) in Q{y/x}fy{z/y}. The same happens in Q{z/x}f. 
Case 2. The last rule is Intll. Suppose that P = Pi\\P2 and 

x^MQ) 



{P,p) "^-'^ {P' = Pi\\P2,p') 



Since f{bv{a)) = bv{a), it follows from the induction hypothesis that {Pif, f{p)) 
{Qi,f{p)) with Qi =a P{f- We assert that x ^ fv{P2f). If not so, then 
there exists u G fv{P2) such that x = /(u). Note that x = bv{a) and 
f{x) = X. It holds that /(x) = /(ti) and x = u £ fv{P2) because / is 
one-to-one. This is a contradiction. Thus, we can use the Intll rule to 
derive 

(P/ = P1/IIP2/, /(/>)) (Ql||P2/,/(p)>, 
and Ql\\P2f=a {P[\\P2)f = P'f. 

Case 3. The last rule is Comm. Let P = -P1IIP2 and 

(Pi,p)'^^(p;,p) {P2.p)''^{p^,p) 
{p,p)^{p[\\p^,p) 

c! f(x) 

Then by the induction hypothesis we have (P2/, /(p)) {^2!^ fip))- 

This together with Lemma 13.21 implies f{x) G fv{P2f). On the other hand, 
we can find y ^ fv{Pi) with /(y) = y because / is almost everywhere the 
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identity in the sense that f{u) = u for all except a finite number of variables 

u. Then using Lemma l3.3l we obtain {Pi,p) {Qi,p) with Qi P[{y/x}. 

Now it follows from the induction hypothesis that (Pi/, f{p)) ^ {Q'l, f{p)) 
for some Q[ =„ Qif. Since f{x) G fv{P2f) and fv{Pif) n /^^(Pa/) = 0, it 
holds that f{x) ^ fv{Pif), and with Lemma 13.31 we are able to assert that 

(PifJip)) ''^"^ (QiJip)) with Q'/ ^„ Q[{fix)/y}. Then by applying the 
Comm rule we have: 

{Pf = Plf\\P2f,f{p)) ^ {Q'l\\P2Jip))- 

Now it holds that 

Q'l Q'i{f{x)/y} Qif{f{x)/y} 
Pi{y/x}f{f{x)/y} Pif. 

The last q— conversion is verified as follows: x becomes y in P[{y/x}, and 
it is still y in P[{y/x}f because f{y) = y. Then x is substituted by f{x) in 
P{{y/x}/{/(x)/y}. For any u G fv{P[) — {x}, u is not changed in P[{y/x}, 
and it becomes f{u) in P{{y/x}f. If /(n) 7^ y, then n is substituted by 
f{u) in P{{y/x}/{/(x)/y}. So, it suffices to show that f{u) / y. If not so, 
then f{u) = y = f{y) and u = y because / is one-to-one. Using Lemma 13.21 

we assert that fv{P{) C fv{Pi) U {x} since (Pi,/?) {P{,p). This leads to 
w G fv{P[) — {x} C fv{Pi). However, y ^ fv{Pi). This is a contradiction. 

□ 



8.3 Proof of Lemma 1X51 

We proceed by induction on the depth of inference (P/, /(/?)) (Q) <^)- We 
only consider the following three cases: 

Case 1. The last rule is Oper. Then P = £[X].R, Pf = £f[f{X)].Rf 

and 

(^'/,/(p))^^-''^' {Rf,{£f)fix){fip))- 

On the other hand, we have {P^ p) {R^£x{p)) • It suffices to show that 
f{£x{p)) = {£f)fi,x){f{p))- In fact, 

i£f)f{X) = £f ® ^Var~f{X) 

= {f\xo£o(f\xr')®Ivar-nx) 
= f o{£® lyar^x) ° 
= fo£xof-\ 
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Thus, = {fo£xo f-'){f{p)) = f{Sx{p)). 

Case 2. The last rule is Input. Then P = c?x.R, Pf = c?y.R{y/x}fy, 
where y ^ fv{c!x.R) U fv{Rf), fy{y) = y and fy{u) = u for all n 7^ x, and 

(PfJip)) {R{y/x}fy{z/y}Jip)) 

where z ^ fv{c?y.R{y/x}fy). 
We first prove the following: 

Claim, z ^ fv{c?y.R{y/x}fy) implies z ^ fv{c!x.R) 

In fact, if 2; G fv{c!x.R), then z G fv{R) and z ^ x. This leads to 
z G /f(-R{y/2;}). Since z = bv{a), z = f{z) = fy{z) G fv{R{y/x}fy). Note 
that y ^ fv{c!x.R). Then z ^ y, and z G fv{c?y.R{y/x}fy). 

Now using the Input rule we have {P, p) ^ (i?{z/x}, p), and it suffices 
to note that R{y/x}fy{z/y} = R{z/x}f. 

Case 3. The last rule is Comm. Suppose that P = -Pi||i-*2 and we have: 

(PlfJip)) ''^ {Ql,fip)) {P2f,f{p)) (Q2, /(/>)) 

{Pf = Pif\\P2fJ{p)) ^ {QMJip)) 

Then by the induction hypothesis we obtain {P2, p) {P2, p), fiu) = x and 
Q2 =a P2f for some y and 

We can find variable z ^ fv{Pif) such that f{z) = z because / is almost 

everywhere the identity. Thus by Lemma 13.31 we assert that (Pi/, /(/>)) ^ 
{Q'li f{p)) foi^ some Q'l =a Qi{z/x}. Now using the induction hypothesis we 

have {Pi: p) -5 {P{j p) for some P{ with Q[ P^f- From Lemma 13.21 we 
see that y G fv{P2), which implies y ^ fv{Pi). Then using Lemma [3 . 3 1 once 

again we obtain {Pi,p) ^ {P{',p) for some P{' =a P{{y/z}. Therefore, it 
is derived by the Comm rule that {P, p) {Pi\\P2, p) ■ What remains is 
to show that Qi\\Q2 =a (^'f 11^2)/ = Pi f\\P2f- Note that we already have 
Q2 =a ^2/- the other hand, since P[' =a P{{y/z}, Q[ =a P{f and 
Q'l =a Qi{z/x}, it follows that 

Pi'f P[{y/Z}f P[f{x/Z} 

=a Q'i{x/z} =a Ql{z/x}{x/z} =a Ql 

because x = f{y). □ 
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8.4 Proof of Lemma 14.21 

We first show that P ^ Q imphes Pf ~ Qf . Put 

n = {{{P\p), {Q', a)):P' =a Pf, Q' =a Qf 
and {P,f-Hp))^{Q,f-\a))}. 

It suffices to show that 7?. is a strong bisimulation. Suppose that P' =a Pf, 
Q' ^« Qf and {P, f-\p)) ~ {Q,f-H<j)). 

If {P', p) {R, p) and X i fv{P') U fv{Q'), we can choose y ^ fv{P') U 
fv{Q') U fv{R) such that f{y) = y because / is almost everywhere the 
identity, and fv{P'), fv{Q') and fv{R) are all finite. Since y ^ fv{P'), and 
P' =a Pf implies fv{Pf) = fv{P'), we have x ^ fv{Pf). Then it follows 
from Lemma 13.61 that 

for some Ri =a R{y/x}. Now we can use Lemma [331 to derive that 

{P,f-\p))''^{R2,f-\p)) 

for some R2 with Ri =a -R2/ because f{y) = y. Note that y ^ fv{P) U 
fv{Q). Otherwise, we have 

y = fiy) e fv{Pf) u fv{Qf) = fv{P') u fv{Q'), 

which contradicts to the assumption about 2/. Thus, {P, f^^{p)) ~ {Q, f^^{cr)), 
together with Lemma |4.H leads to 

for some 5*2 such that 

{R2{z/y},f-Hp))r^{S2{z/y},f'\a)) 

for all z ^ fv{R2) U fv{S2) — {y}- Then, using Lemma 13.41 we obtain 

{Qf,cr) {Si, a) for some Si =a S2f, and an application of Lemma \3M 

yields {Q',a) {S,a) for some S =a Si{x/y} because f{y) = y and 
x ^ fv{Q'). So, what we still need to prove is that 

{R{u/x],p)n{S{u/x],(T) 

for each u ^ fv{R)[Jfv{S) — {x}. This comes immediately from the following 
three items: 
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(i) Since Ri =a R{y/x}, it holds that x ^ fv{Ri). Note that y ^ fv{R). 
This imphes 

R =a R{y/x}{x/y} =„ Ri{x/y} =a R2f{x/y} 
because Ri =a R2f- Then 

R{u/x} =a R2f{x/y}{u/x} =a R2f{u/y} 
since x ^ fv{Ri) = /f(i?2/). Furthermore, we obtain 

R{u/x} =^ R2f{u/y} =a R2{r\u)/y]f 

because f{y) = y, f is one-to-one, and f{v) ^ y when v ^ y. 

(ii) Similarly, we have S{u/x} =a S2{f~^{u)/y}f. 

(iii) f-^iu) i fv{R2)Ufv{S2)-{y}. Otherwise, we have u E fv{R2f)U 
fv{S2f) and y ^ u because f{y) = y. Since i?2/ =a R{y/x} and ^2/ =a 
S{y/x}, it holds that u G fv{R{y/x}) U fv{S{y/x}). This implies that 
u ^ X and u G fv{R) U fv{S), or x E fv{R) U fv{S) and u = y. However, 
we already know that y ^ u. Then it must be the case that u ^ x and 
u E fv{R) U fv{S), which contradicts to the assumption about u. 

For the case that {P, p) — > (i?, p') and a is r or of the form c\x, the argu- 
ment is similar and much easier. Thus, we complete proof of the conclusion 
that P ~ Q implies P/ ~ Q/. 

Conversely, we show that Pf ^ Qf implies P ^ Q. Note that /^^ is 
also a substitution. Then it holds that {Pf)f~^ ~ {Qf)f~^- Since P =a 
{Pf)r^ and Q =^ {Qf)r\ we obtain P ~ {Pf)r^ and Q ~ (Q/)/"! 
by using Proposition 14.11 and it follows that P ~ Q. □ 

8.5 Proof Technique of 'Strong Bisimulation up to' 

The 'up to' technique widely used in process algebras will be needed in 
proving some of our main results. For any TZ C Con x Con, we set 

suh{n) = {{{PfJ{p)),{QfJ{cj))): 

{P,p)7l{Q,a) and/ is a substitution}. 

Definition 8.1 A symmetric relation TZ Q Con x Con is called a strong 
bisimulation up to substitution if for any (P, p), {Q, a) E Con, (P, p)TZ{Q, 0) 
implies, 

1. whenever {P, p) {P',p') and a is not an input, then for some 
{Q',a'), {Q,a) ^ {Q',a') and {P' , p')sub{n){Q' ,a'); and 
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2. whenever {P, p) ^ {P' i p) o^f^d x ^ fv{P) U fv{Q), then for some Q' , 

{Q,a) {Q',a) and for ally ^ fv{P')Ufv{Q')-{x}, {P' {y / x} , p) sub{n) {Q' {y / x} , a) . 

Lemma 8.1 IflZisa strong hisimulation up to substitution then IZ ^ ^. 

Proof. Similar to the proof of Lemma 6 in [12j. □ 

Definition 8.2 A symmetric relation TZ Q Con x Con is called a strong 
hisimulation up to ~ if for any {P,p),{Q,(t) £ Con, {P,p)TZ{Q,a) implies, 

1. whenever {P, p) {P',p') and a is not an input, then for some 
(Q', a'), {Q, a) ^ {Q', a') and {P\ p') ^ IZ ^ {Q', a'); and 

clx 

2. whenever (P, p) {P\ p) and x ^ fv{P) U fv{Q), then for some , 

{Q,a) {Q',a) and for all y^ fv{P')Ufv{Q')-{x}, {P'{y/x},p) ~ 
7^~(Q'{y/x},a). 

Lemma 8.2 IfTZ is a strong hisimulation up to ~ then TZ Q ^. 

Proof. Similar to the proof of Lemma 9 in [12j (note that Lemma 18.11 is 
needed here). □ 

A6. Proof of Proposition 14.51 

For simplicity, we write E(A) for E{X(2;) := A(x)} for any process expres- 
sion E, process variable scheme X and process constant scheme A. 

^ def 

We only present the proof for the simplest case where A{x) = E(^), 

^ def 

B{x) = F{B) and E ~ F, and it can be generalized to the general case 
without any essential difficulty. 
We set 

TZ={{{G{A),p),{G{B),p)) : G contains at most 
the process variable scheme X and p £V{TL)}. 

With Lemma 18.21 it suffices to show that 7^ is a strong hisimulation up to 
~. Suppose that 

(G(A),p)^(P,p'). (4) 

We are going to prove the following two claims: 

Claim 1. If a is not an input, then for some Q, {G{B),p) {Q,p'), and 
{P,p') ~ {Pi,p')n{Qi,p') ~ {Q,p') for some Pi,Qi; 
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Claim 2. If a = c?x and x ^ fv{G{A)) U fv{G{B)), then for some Q, 
{G{B),p) {Q,p), and for all y ^ fv{P) U fv{Q) - {x}, {P{y/x},p' = 
P) ~ {Pi,p)T^{Qi,p) ~ {Q{y/x},p) for some Pi,Qi. 

Note that the above claims are a little bit stronger than the two condi- 
tions in Definition [8]2l where the environments of the configurations involved 
in ~ 7^ ~ are not required to be the same. We proceed by induction on the 
depth of inference (H]). For simplicity, we only consider the following five 
cases, and the others are similar or easy and thus omitted. 

Case 1. G = X(y), a = clu and u ^ jv[G{A)) U fv{G{B)). Then 
G{A) = A{y), G{B) = B{y), u i {y}, and p' = p. 

We want to find some Q such that {G{B) = B{y),p) {Q,p), and for 
allz^ MP)uMQ)-{u}, {P{z/u},p) r^TZr^ {Q{z/u},p). 

First, we choose some vq ^ {y}. Then for each z ^ fv{P) U fv{Q) — {u}, 
from dH) and Lemma 13.11 2 we obtain 

{G{A),p{vo/z})''^{P,p{vo/z}). (5) 

~ def 

Since A{x) = E(A), transition ([5]) must be derived by the Def rule from 

{E{A){y/x},p{vo/z}) {P,p{v,/z}). (6) 

On the other hand, we have fv{E{A)) C {x}. Thus, fv{E{A){y/x}) C {y} 
and u i fv{E{A){y/x}). Note that E(^){y/x} = E{y/x}(^), and the 
depth of inference ([6]) is smaller than that of inference ([5]) , which is equal to 
the depth of inference ([!]). So, the induction hypothesis leads to, for some 
i?, 

(E(i?){y/J} = E{y/x]{B),p{v,/z]) ''^ {R,p{v,/z]) (7) 
and for all v ^ fv{P) U fv{R) - {u}, 

{P{v/u},p{vo/z}) - 71 ~ {R{v/u},p{vo/z}). (8) 

It follows from E ~ F that E(i?) ~ F(i?). Furthermore, we obtain 

E{B){y/x} ~ F{B){y/x} by using Lemma [42l Since B{x) =^ F{B), it 
holds that u ^ fv(F{B){y /x}) C {y}. Consequently, for some Q, 

{F{B){y/x},p{vo/z}) - (Q, p{vo/z}) (9) 
and for all v i fv{R) U fv{Q) - {u}, 

{Q{v/u},p{vo/z}) ~ {R{v/u},p{vo/z}). (10) 
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Using the Def rule, we obtain {B{y), p{vo/z}) — > {Q,p{vo/z}), from ([9]), 

and Lemma [3TTl 2 yields {B{y),p) —> {Q,p). 

Now we have to show that for all z ^ fv{P)Ufv{Q) — {u}, {P{z/u}, p) ~ 
TZ ^ {Q{z/u},p). In fact, from ([7|), Q and Lemma [3121 2 we see that 
fv{P) C /t;(G(^))uM, fv{R) C fv{B{B))U{u}, and fv{Q) C fv{F{B))U 
{u}. Then fv{P),fv{R),fv{Q) C {y} U {u}, and vq i {y) implies ^ 
U U ^v{Q) - {n}. Furthermore, it follows from ^ and ^ 

that (P{uoM,/){fo/2}> ~ 7^ ~ (i?{uoM,p{t'o/4) ~ '\Q{vqIu],p{vqIz\). 
With the observation G(A)/ = G/(A) for all substitutions /, we see that 
subiTZ) = TZ. Therefore, we obtain 

{P{z/u},p) = {P{vo/u}{z/vo},p{vo/z}{z/vo}) 
r^TZr^ {Q{vq/u}{z/vq},p{vo/z}{z/vq}) = {Q{z/u},p) 

by using Lemma 14.21 once again. 

Case 2. G = 8[X].Gi. ThenG{A) = 8[X].Gi{A), G{B) = S[X].Gi{B), 

a = E[X], P = Gi{A) andp' = Ex{p)- We have {G{B),p) ""4^' {Gi{B),Ex{p)) 
and {P,p')TZ{Gi{B),£x{p)). 

Case 3. G = c?x.Gi. Then transition (j4]) must be as follows: 

{G{A) = c?x.Gi{A),p) "^'^ {P = Gi{A){y/x},p' = p) 
where y ^ fv{Gi{A)) — {x}. In this case, we have the assumption that y ^ 

fv{G{A)) U fv{G{B)). Since G{B) = c?x.Gi{B), we obtain {G{B),p) 
{Gi{B){y / x} , p) by the Input rule. Moreover, for any z ^ fv{P)Ufv{Gi{B){y/x}) — 
M, we have P{z/y} = G,{A){y/x}{z/y} = Gi{A){z/x} = Gi{z/x}{A) 
andGiiB){y/x}{z/y} = Gi{B){z/x} = Gi{z/x}iB). So, {P{z/y}, p')TZ{GiiB){y/x}{z/y}, p). 
Case 4. G = Gi||G2, a = c?x, x ^ fv{Gi{A)) U /v(G2(A)) and 

transition (jl]) is derived by the Intll from {Gi{A), p) ^ {Pi,p). Then 
G(A) = Gi(^)||G2(A), P = Pi\\G2{A) and p' = p. By the induction 

hypothesis we have, for some Qi, {Gi{B),p) {Qi,p), and for all y ^ 
fv{Pi)Ufv{Qi)-{x}, {Pi{y/x},p) ~ {Pi,p)n{Q[,p) ~ {Qi{y/x},p) for 
some P{,Q'i. It is clear that x ^ fv{G2{B)). Thus, we obtain 

{G{B) = G^{B)\\G2{B),p) {Q,\\G2iB),p) 

by the Intll rule. For any z ^ fv{P) U fv{Qi\\G2{B)) - {x}, we have z ^ 
fv{Pi)Ufv{Qi)-{x}, and {Pi{z/x},p) ~ {P{, p)n{Q[, p) ~ {Q[{z/x},p). 
This, together with Proposition 14. 41 2. f. leads to 

{P{z/x},p) = {P^{z/x}\\G2{A),p) ~ {Pi\\G2iA),p)n 
{Q[\\G2iB),p) ~ {Q,{z/x}\\G2iB) = iQ,\\G2{B)){z/x}, p). 
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Case 5. G = G1IIG2, a = r and transition (jj]) is derived by the 
Comm rule from (Gi(A),p) ^-5 and {G2{A),p) {P2,p). Then 

p' = p and P = Pi 1 1^2- With the induction hypothesis we have, for 
some Qi,g2, {Gi{B),p) '-^ {Qi,p) and {G2{B),p) [Q^.p), {P^p) ~ 
(Pl^^)7^(Q;,p) ~ (Qi,p) for some and (P2,p) ~ (P^, p)7^(Q'2, p) ~ 

(Q2,p) for some P^,Q'2. Then (G(B) = Gi(B)||G2(P), p) ^ (Qi||Q2,p), 
and by Proposition [Ol2.f it follows that (P,/>) ~ (P^||P;^,p)7^(Q;||Q^,p) ~ 

{Qi\\Q2,p). 

A7. Proof of Proposition [TT] 

We have the following familiar lemma for the actions of weakly guarded 
process expressions: 

Lemma 8.3 /f Xj (i < m) are weakly guarded in E, and (E{Xj(xj) := 
Pj,i < m},p) — > {P',p'), then for some E', we /ia?;e; 

i. P' = E'{Xj(xi) := Pi,i < m}; and 

2. 

(E{Xi(xi) ■.= Qi,i<m},p) 

^ (E'{Xi(i,) :=Qi,i <m},/)'). 

Proof Induction on the structure of E. □ 

Now we begin to prove Proposition [TTJ For simplicity, we write G(P) 
for G{Xi{xi) := Pi, 1 < i < m}. Let 

n = {((G(P),p), {G{Q),p)) : G contains at most X^ 
(1 < i < m) and p G U Idcon, 

where Idcon is the identity relation on configurations. Our purpose is to 
show that 7^ is a strong bisimulation up to ~. Assume that 

(G(P),/>)^(P,p'). (11) 

By induction on the depth of inference (jlip we are going to prove the fol- 
lowing: 

Claim 1. If a is not an input, then for some Q, {G{Q), p) {Q, p'), and 
(P,p') ~ {Pi,p')n{Qi,p') ~ {Q,p') for some Pi,Qi; 
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Claim 2. If a = c?x and x ^ fv{G{P)) U fv{G{Q)), then for some Q, 
(G(g),p) and for all y i fv{P) U /t;(Q) - {x}, = 

P) ~ {Pi,p)T^{Qi,p) ~ {Q{y/x},p) for some 

We only consider the following clS 9j sample: 

Case 1. G = Y{y), a = c?x and x i fv{G{P)) U fv{G{Q)). Then 
Y = Xj for some i < m, G(P) = G((5) = <3i{y/5?i}, and p = p'. 

We choose some u ^ [J'^iifviPi) U fv{Qi) U /w(Ei)) U {y}. Then u ^ 

/u(G(P)), and {Pi{y/x^},p) ^-^ for some P' =„ Pf-u/^;}. Since Pi ~ 

Ei(P), we obtain Pi{y/^}^r^ Bi{P){y/xi} = Ei{y/x,}{P) by Lemma 1121 
It holds that u ^ fv{Pi{y/xi})Ufv{Ei{y/xi}{P)). So, we have for some P" , 

(E,{y/5?J(P),/,)^^"(P",p),and 

(P'{^M,P)~(^"{^M,P) (12) 

for all z ^ fv{P') U fv{P") — {u}. By Lemma [8131 we obtain for some E', 
P" = E'(P) and 

{Ei{Q){y/x,} = E,{y/x,}{Q),p) (E'(Q),p). 

Note that G(Q) ~ Ei{Q){y/x^}, and ^ fv{G{Q)) U /?;(E,(Q){y/5?,}). 
Then for some Q', {G{Q),p) '—^ {Q',p), and 

{E'iQ){z/u},p)^{Q'{z/u},p) (13) 

for ah z i fv{E'{Q)) U /t;(Q') - {u}. Since x ^ fv{G{Q)), we have 

(G(Q),/j) '-5 {Q,p), where Q Q'{x/n}. 

It follows from Lemma 13.21 that fv[P) C fv{Pi{y/xi\) U {x}. Then 
M ^ /?;(P) - {x}. Since P' =a P{u/x], it holds that P P'{x/u]. We 
now choose vo i \S=iif<Pi) U fv{Qi) U /t;(E,)) U {y} U fv{P) U /?;(Q). 
It is obvious that fv{P') C fv{P) U {n}. On the other hand, we see that 
fv{P") C fv(Ei{y/x^}{P)) by Lemma [321 Thus, vq i fv{P') U /u(P") - 
{u}, and from (fT2]) we obtain {P'{vo/u},p) ~ (P"{vo/'w}; Z')- Further- 
more, it follows from Lemma [4.21 that {P',p{u/vo}) ~ {P" , p{u/vo}) and 
{P'{x/u}, p{u/vo}{x/u} = p{x/vo}) ~ {P" {x / u} , p{x / vq}) . Then using 
Pr op osition 14 . 1 1 we obtain 

{P,p{x/vo}) ~ {P"{x/u} = E'(P){x/n} 
= E'{x/u}{P),p{x/vo}) 
7^(E'{x/n}(g) = E'{Q){x/u},p{x/vo}. 
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Again, we see that /i;(E'(Q)) C fv(Ei{Q){y/xi}) U^{u} and fv{Q') C 
fv{Qi{y/x^}) by Lemma O Hence^ vq ^ fv{B'{Q)) U fv{Q') - {u}. 
This, together with ([13]), imphes {Ei'{Q){vo/u}, p) ~ {Q' {vq / u} , p) . Using 
Lemma 14.21 again we obtain 

(E'ix/u} = B'{vo/u}{x/vo},p{x/vo}) 

~ {Q'{x/u} = Q'{vo/u}{x/vo},p{x/vo}) 
~ {Q,p{x/vo}) 

because Q =a Q'{x/u}. 

Now it suffices to show that for ah y ^ fv{P)Ufv{Q)—{x}, {P{y/x}, p) ~ 
{P' , p)Tl{Q' , p) ~ {Q{y/x}, p) for some P',Q'. This can be carried out in a 
way similar to that at the end of Case 1 in the proof of Proposition 14.51 

A8. Proof of Proposition [6711 1 

We need the following simple lemma. 

Lemma 8.4 If Ri is a strong Xi—bisimulation {i = 1,2), then TZi oTZ2 is a 
strong (Ai + X2) — bisimulation. 

Proof. We first show that TZi o 7^2 is (Ai + A2)— closed. If D{p,a) < 
Ai + A2, then there must be 5 such that 5) < Ai and D{d, o") < A2. Since 
TZi is Aj-closed for i = l,2, it holds that {P, p)ni{P, 6) and {P, 5)7^2(P, a). 
This implies {P, p)TZi o Tl2{P, cr). 

Suppose that oTZ2{Q,(t). Then (P, p)7^l(i^, J) 7^2((5,c^) for 

some R and 6. We only need to consider the following case: if {P, p) 

{P',p'), then for some g,R' and 6', {R,6) {R\6'), {P' , p')ni{R\5') and 

D^{£,g) < Ai, and furthermore, for some J^,Q' and a', {Q,a) — > {Q',a'), 
{R\5')1Z2{Q',<t') and D^{g,r) < A2. Then (P', ;o')7^l o 7^2(Q^ a') and 
Do{£,J^) < Do{£,g) + Do{g,J^) < Xi + X2. □ 

To prove Proposition 16. Il l, we only need to check the triangle inequality: 
for any quantum processes P, Q and R, 

Dsb{P, R) < Dsb{P, Q) + D,b{Q, R). 

It suffices to show that for any Ai, A2 > 0, if Dsb{P, Q) < Ai and DgbiQ, R) < 
A2, then Z?sf,(P, i?) < Ai + A2. In fact, it follows from Dsb{P,Q) < Ai and 
Dsb{Q,R) < A2 that for some pi < Ai and p2 < ^2, we have P 
Q ^- Thus, for all p, {P, p) {Q,p) ~a'2 there are strong 



48 



Ai— bisimulation TZi and strong A2— bisimulation TZ2 such that (P, p)TZi {Q, p)Tl2{R, p)- 
This leads to {P, p)TZi o TZ2{R,p)- The above lemma asserts that TZi o 1^2 
is a strong {pi + /i2)— bisimulation, and thus {P, p) ^1x1+^2 [R^p)- Hence, 
P '^w+M2 -R) and -Ds6(-P, ^) < /^i + M2 < Ai + A2. □ 
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